Browse CVEs

HIGH 7.8 CVE-2016-2477 mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2476 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which … Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-2464 libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attacke… Android Mitigation only Fix from $1,9502016-06-13 HIGH 8.4 CVE-2016-2463 Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.… Android Mitigation only Fix from $1,9502016-06-13 HIGH 7.8 CVE-2016-4477 wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library… Android No fix yet Fix from $1,9502016-05-09 MEDIUM 5.5 CVE-2016-2460 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structure… Android Mitigation only Fix from $1,6002016-05-09 MEDIUM 5.5 CVE-2016-2459 mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structure… Android Mitigation only Fix from $1,6002016-05-09 MEDIUM 5.5 CVE-2016-2458 The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attach… Android Mitigation only Fix from $1,6002016-05-09 MEDIUM 5.5 CVE-2016-2457 server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass in… Android Mitigation only Fix from $1,6002016-05-09 HIGH 7.8 CVE-2016-2452 codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 201… Android Mitigation only Fix from $1,9502016-05-09 HIGH 7.8 CVE-2016-2449 services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.… Android Mitigation only Fix from $1,9502016-05-09 HIGH 7.8 CVE-2016-2448 media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a… Android Mitigation only Fix from $1,9502016-05-09 HIGH 7.8 CVE-2016-2440 libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 mishandles ob… Android Mitigation only Fix from $1,9502016-05-09 HIGH 8.8 CVE-2016-2439 Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 all… Android Mitigation only Fix from $1,9502016-05-09 HIGH 7.8 CVE-2016-2430 libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attacke… Android Mitigation only Fix from $1,9502016-05-09 CRITICAL 9.8 CVE-2016-2429 libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not preve… Android Mitigation only Fix from $2,3002016-05-09 CRITICAL 9.8 CVE-2016-2428 libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not p… Android Mitigation only Fix from $2,3002016-05-09 MEDIUM 5.5 CVE-2016-2426 server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 201… Android Mitigation only Fix from $1,6002016-04-18 MEDIUM 5.5 CVE-2016-2424 server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-0… Android Mitigation only Fix from $1,6002016-04-18 MEDIUM 6.1 CVE-2016-2423 server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not… Android Mitigation only Fix from $1,6002016-04-18 HIGH 7.8 CVE-2016-2422 Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate i… Android Mitigation only Fix from $1,9502016-04-18 HIGH 7.8 CVE-2016-2420 rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows atta… Android Mitigation only Fix from $1,9502016-04-18 CRITICAL 9.8 CVE-2016-2419 media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attack… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-2418 media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers … Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-2416 libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does n… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-2417EPSS 5% media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initia… Android No fix yet Fix from $2,3002016-04-18 MEDIUM 6.2 CVE-2016-2414 The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in f… Android Mitigation only Fix from $1,6002016-04-18 MEDIUM 5.5 CVE-2016-2415 exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.… Android Mitigation only Fix from $1,6002016-04-18 HIGH 7.8 CVE-2016-2413 media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle poin… Android Mitigation only Fix from $1,9502016-04-18 HIGH 7.8 CVE-2016-2412 include/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 201… Android Mitigation only Fix from $1,9502016-04-18