|
265261
|
5.5 |
MEDIUM
Local
|
google
|
android
|
The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access restrictions and obtain sensitive information …
|
CWE-200
Information Exposure
|
CVE-2016-3834
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265262
|
7.8 |
HIGH
Local
|
google
|
android
|
The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS permissions, which allows attackers to bypa…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-3833
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265263
|
7.8 |
HIGH
Local
|
google
|
android
|
The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, which allows att…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-3832
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265264
|
7.5 |
HIGH
Network
|
google
|
android
|
The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device crash) via a NITZ t…
|
CWE-20
Improper Input Validation
|
CVE-2016-3831
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265265
|
5.5 |
MEDIUM
Local
|
google
|
android
|
codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of…
|
CWE-20
Improper Input Validation
|
CVE-2016-3830
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265266
|
5.5 |
MEDIUM
Local
|
google
|
android
|
The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service (device hang or reboot) vi…
|
CWE-172
Encoding Error
|
CVE-2016-3829
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265267
|
5.5 |
MEDIUM
Local
|
google
|
android
|
decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service (device hang or reboot) via a…
|
CWE-172
Encoding Error
|
CVE-2016-3828
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265268
|
5.5 |
MEDIUM
Local
|
google
|
android
|
codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or r…
|
CWE-172
Encoding Error
|
CVE-2016-3827
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265269
|
7.8 |
HIGH
Local
|
google
|
android
|
services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the reply size for an AudioFlinger ef…
|
CWE-20
Improper Input Validation
|
CVE-2016-3826
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265270
|
7.8 |
HIGH
Local
|
google
|
android
|
mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates an incorrect amount of memory, which allows attack…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-3825
|
2024-11-21 11:50 |
2016-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|