Browse CVEs

MEDIUM 6.5 CVE-2016-2411 A Qualcomm Power Management kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application that leverag… Android Mitigation only Fix from $1,6002016-04-18 HIGH 8.8 CVE-2016-0850 The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow… Android Mitigation only Fix from $1,9502016-04-18 HIGH 8.4 CVE-2016-0847 The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephon… Android Mitigation only Fix from $1,9502016-04-18 HIGH 8.4 CVE-2016-0842 The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote … Android Mitigation only Fix from $1,9502016-04-18 CRITICAL 9.8 CVE-2016-0841 media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-… Android Mitigation only Fix from $2,3002016-04-18 HIGH 8.4 CVE-2016-0840 Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to exec… Android Mitigation only Fix from $1,9502016-04-18 CRITICAL 9.8 CVE-2016-0839 post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execu… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0837 MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 al… Android Mitigation only Fix from $2,3002016-04-18 CRITICAL 9.8 CVE-2016-0838 Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative n… Android Mitigation only Fix from $2,3002016-04-18 HIGH 7.8 CVE-2016-0836 Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary cod… Android Mitigation only Fix from $1,9502016-04-18 CRITICAL 9.8 CVE-2016-0835 decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of serv… Android Mitigation only Fix from $2,3002016-04-18 HIGH 8.4 CVE-2016-0834 An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of ser… Android Mitigation only Fix from $1,9502016-04-18 CRITICAL 9.8 CVE-2016-1621EPSS 6% libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary co… Android Mitigation only Fix from $2,3002016-03-12 MEDIUM 6.1 CVE-2016-0832 Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection pr… Android Mitigation only Fix from $1,6002016-03-12 MEDIUM 6.5 CVE-2016-0830 btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent da… Android Mitigation only Fix from $1,6002016-03-12 MEDIUM 5.5 CVE-2016-0831 The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 201… Android Mitigation only Fix from $1,6002016-03-12 HIGH 7.5 CVE-2016-0829 The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 … Android Mitigation only Fix from $1,9502016-03-12 HIGH 7.8 CVE-2016-0827 Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attacke… Android Mitigation only Fix from $1,9502016-03-12 HIGH 7.5 CVE-2016-0828 The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x bef… Android Mitigation only Fix from $1,9502016-03-12 HIGH 7.8 CVE-2016-0826 libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraSe… Android Mitigation only Fix from $1,9502016-03-12 MEDIUM 5.3 CVE-2016-0825 The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leve… Android Mitigation only Fix from $1,6002016-03-12 MEDIUM 5.3 CVE-2016-0824 libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified … Android Mitigation only Fix from $1,6002016-03-12 HIGH 7.0 CVE-2016-0822 The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverag… Android Mitigation only Fix from $1,9502016-03-12 HIGH 7.8 CVE-2016-0820 The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 2… Android Mitigation only Fix from $1,9502016-03-12 HIGH 7.8 CVE-2016-0819 The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privilege… Android Mitigation only Fix from $1,9502016-03-12 MEDIUM 5.9 CVE-2016-0818 The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, a… Android Mitigation only Fix from $1,6002016-03-12 CRITICAL 9.8 CVE-2016-0816 mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Android Mitigation only Fix from $2,3002016-03-12 CRITICAL 9.8 CVE-2016-0815 The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H,… Android Mitigation only Fix from $2,3002016-03-12 MEDIUM 6.1 CVE-2016-0813 packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before… Android Mitigation only Fix from $1,6002016-02-07 HIGH 7.5 CVE-2016-0811 Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows … Android Mitigation only Fix from $1,9502016-02-07