Browse CVEs

HIGH 7.5 CVE-2016-3754 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.5 CVE-2016-3753 mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135. Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-3752 internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attac… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-3750 libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 d… Android Mitigation only Fix from $1,9502016-07-11 HIGH 8.4 CVE-2016-3749 server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or patter… Android Mitigation only Fix from $1,9502016-07-11 HIGH 8.4 CVE-2016-3748 The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that ma… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-3747 Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, … Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-3746 Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, … Android Mitigation only Fix from $1,9502016-07-11 CRITICAL 9.8 CVE-2016-3745 Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attacke… Android Mitigation only Fix from $2,3002016-07-11 HIGH 7.5 CVE-2016-3744 Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a… Android Mitigation only Fix from $1,9502016-07-11 CRITICAL 9.8 CVE-2016-3743 decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to ex… Android Mitigation only Fix from $2,3002016-07-11 CRITICAL 9.8 CVE-2016-3742 decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arb… Android Mitigation only Fix from $2,3002016-07-11 CRITICAL 9.8 CVE-2016-3741 The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute ar… Android Mitigation only Fix from $2,3002016-07-11 HIGH 7.8 CVE-2016-2508 media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x be… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-2507 Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1… Android Mitigation only Fix from $1,9502016-07-11 CRITICAL 9.8 CVE-2016-2506 DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does… Android Mitigation only Fix from $2,3002016-07-11 MEDIUM 5.5 CVE-2016-2500 Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allow… Android Mitigation only Fix from $1,6002016-06-13 MEDIUM 5.5 CVE-2016-2499 AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does … Android Mitigation only Fix from $1,6002016-06-13 MEDIUM 5.5 CVE-2016-2495 SampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow… Android Mitigation only Fix from $1,6002016-06-13 HIGH 7.8 CVE-2016-2494 Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers t… Android No fix yet Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2487 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2486 mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 do… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2485 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX bu… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2484 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX bu… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2483 The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2482 The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2481 The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2480 The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does n… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2479 The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishan… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2478 mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2… Android Mitigation only Fix from $1,9502016-06-13