|
267471
|
6.5 |
MEDIUM
Adjacent
|
google
|
android
|
btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of config…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-0830
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267472
|
7.5 |
HIGH
Network
|
google
|
android
|
The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initial…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0829
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267473
|
7.5 |
HIGH
Network
|
google
|
android
|
The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0828
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267474
|
7.8 |
HIGH
Local
|
google
|
android
|
Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, a…
|
CWE-189
Numeric Errors
|
CVE-2016-0827
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267475
|
7.8 |
HIGH
Local
|
google
|
android
|
libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, whic…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0826
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267476
|
5.3 |
MEDIUM
Network
|
google
|
android
|
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0825
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267477
|
5.3 |
MEDIUM
Network
|
google
|
android
|
libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0824
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267478
|
4.0 |
MEDIUM
Local
|
google linux
|
android linux_kernel
|
The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by r…
|
CWE-200
Information Exposure
|
CVE-2016-0823
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267479
|
7.0 |
HIGH
Local
|
google
|
android
|
The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0822
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267480
|
5.5 |
MEDIUM
Local
|
linux google
|
linux_kernel android
|
The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, w…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2016-0821
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|