Browse CVEs

MEDIUM 6.1 CVE-2016-0812 The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x be… Android Mitigation only Fix from $1,6002016-02-07 HIGH 7.8 CVE-2016-0810 media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requir… Android Mitigation only Fix from $1,9502016-02-07 HIGH 8.8 CVE-2016-0809 Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers … Android Mitigation only Fix from $1,9502016-02-07 HIGH 8.4 CVE-2016-0807 The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted applicatio… Android Mitigation only Fix from $1,9502016-02-07 MEDIUM 6.2 CVE-2016-0808 Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 201… Android Mitigation only Fix from $1,6002016-02-07 HIGH 8.4 CVE-2016-0806 The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain priv… Android Mitigation only Fix from $1,9502016-02-07 HIGH 8.4 CVE-2016-0805 The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows atta… Android Mitigation only Fix from $1,9502016-02-07 CRITICAL 9.8 CVE-2016-0804 The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.… Android Mitigation only Fix from $2,3002016-02-07 CRITICAL 9.8 CVE-2016-0803 libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbi… Android Mitigation only Fix from $2,3002016-02-07 HIGH 7.8 CVE-2015-6647 The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafte… Android No fix yet Fix from $1,9502016-01-06 MEDIUM 6.2 CVE-2015-6646 The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource … Android Mitigation only Fix from $1,6002016-01-06 MEDIUM 5.0 CVE-2015-6645 SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a craft… Android Mitigation only Fix from $1,6002016-01-06 MEDIUM 6.6 CVE-2015-6643 Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset … Android Mitigation only Fix from $1,6002016-01-06 CRITICAL 9.8 CVE-2015-6642 The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unsp… Android Mitigation only Fix from $2,3002016-01-06 HIGH 7.8 CVE-2015-6640 The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is ac… Android Mitigation only Fix from $1,9502016-01-06 HIGH 7.8 CVE-2015-6639EPSS 7% The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafte… Android No fix yet Fix from $1,9502016-01-06 HIGH 7.8 CVE-2015-6638 The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted ap… Android Mitigation only Fix from $1,9502016-01-06 HIGH 7.8 CVE-2015-6637 The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, a… Android Mitigation only Fix from $1,9502016-01-06 CRITICAL 9.8 CVE-2015-6636 mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of servi… Android Mitigation only Fix from $2,3002016-01-06 HIGH 9.3 CVE-2015-8507 mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Android Mitigation only Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6623 Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or Signa… Android Mitigation only Fix from $1,9502015-12-08 HIGH 9.3 CVE-2015-6621 SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated … Android Mitigation only Fix from $1,9502015-12-08 HIGH 10.0 CVE-2015-8096 Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related t… Picasa Mitigation only Fix from $1,9502015-11-09 HIGH 10.0 CVE-2015-8073 mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… Android Mitigation only Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-8072 mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a den… Android Mitigation only Fix from $1,9502015-11-03 MEDIUM 5.8 CVE-2015-6614 Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, pe… Android Mitigation only Fix from $1,6002015-11-03 MEDIUM 5.0 CVE-2015-1574 The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Conten… Email No fix yet Fix from $1,6002015-02-15 HIGH 7.5 CVE-2014-7902 Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibl… Chrome Mitigation only Fix from $1,9502014-11-19 HIGH 7.5 CVE-2014-3178 Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause a denial … Chrome Mitigation only Fix from $1,9502014-09-10 HIGH 7.5 CVE-2014-3179 Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service or possibly have other impact… Chrome No fix yet Fix from $1,9502014-09-10