Latest CVE Feed
-
9.3
HIGHCVE-2016-3934
drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gai... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3913
media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate a certain static_cast operation, which allows attacke... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3911
core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30143607.... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3900
cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not properly restrict service registration, which allows attackers to gain privileges via a cr... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3910
services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546.... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3901
Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka An... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3873
The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 29518457.... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3869
The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29009982 and Broadcom internal bug RB#... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3859
The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28815326 and Qualcomm internal bug CR1034641.... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3864
The Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28823714 and Qualcomm internal bug CR9... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3844
mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517.... Read more
Affected Products : android- Published: Aug. 05, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3833
The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS permissions, which allows attackers to bypass intended access restrictions via a crafted applicatio... Read more
Affected Products : android- Published: Aug. 05, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3862
media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni, which allows remote attackers to execute ar... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3867
The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897.... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3912
The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application, aka internal bug 30202481.... Read more
Affected Products : android- Published: Oct. 10, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3842
The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm internal bug CR1002974.... Read more
Affected Products : android- Published: Aug. 05, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3807
The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196.... Read more
Affected Products : android- Published: Jul. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3868
The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28967028 and Qualcomm internal bug CR1032875.... Read more
Affected Products : android- Published: Sep. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3804
The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28332766 and MediaTek internal bug ALPS02694410.... Read more
Affected Products : android- Published: Jul. 11, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-3800
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175027 and MediaTek internal bug ALPS02693739.... Read more
Affected Products : android- Published: Jul. 11, 2016
- Modified: Apr. 12, 2025