Browse CVEs

MEDIUM 6.8 CVE-2016-3876 providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass t… Android Patch available Fix from $1,6002016-09-11 MEDIUM 6.8 CVE-2016-3875 server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOW_SAFE_BOOT setting, which allows physically proxima… Android Patch available Fix from $1,6002016-09-11 HIGH 7.8 CVE-2016-3874 CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments a… Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3873 The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 295… Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3871 Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before… Android Patch available Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3870 omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-… Android Patch available Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3869 The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers to … Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3868 The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka … Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3867 The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka An… Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3866 The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, … Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3865 The Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows attackers to gain privileges via a crafted application… Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3864 The Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to … Android after 7.0 Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3861EPSS 10% LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions… Android Patch available Fix from $1,9502016-09-11 HIGH 7.8 CVE-2016-3859 The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted applicati… Android after 7.0 Fix from $1,9502016-09-11 CRITICAL 9.8 CVE-2016-5143 The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase… Chrome after 52.0.2743.82 Fix from $2,3002016-08-07 HIGH 7.8 CVE-2015-8943 drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exis… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2015-8942 drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2015-8941 drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices d… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2015-8940 Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2015-8939 drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, g stages,… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2015-8938 The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows att… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9891 drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which a… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9890 Off-by-one error in drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and … Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9887 drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain length value… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9885 Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices allows attack… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9881 drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices uses an incorrect integer data typ… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9880 drivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate VEN_IOCT… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9879 The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which allows attac… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9878 drivers/mmc/card/mmc_block_test.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not reject kernel-space buffer addr… Android after 6.0.1 Fix from $1,9502016-08-06 HIGH 7.8 CVE-2014-9875 drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges vi… Android after 6.0.1 Fix from $1,9502016-08-06