|
265471
|
7.5 |
HIGH
Network
|
google
|
android
|
decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service (device hang or r…
|
CWE-20
Improper Input Validation
|
CVE-2016-3755
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265472
|
7.5 |
HIGH
Network
|
google
|
android
|
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of serv…
|
CWE-399
Resource Management Errors
|
CVE-2016-3754
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265473
|
7.5 |
HIGH
Network
|
google
|
android
|
mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135.
|
CWE-200
Information Exposure
|
CVE-2016-3753
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265474
|
7.8 |
HIGH
Local
|
google
|
android
|
internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attackers to gain privileges via a crafted application,…
|
CWE-19 CWE-254
Data Processing Errors 7PK - Security Features
|
CVE-2016-3752
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265475
|
7.8 |
HIGH
Local
|
libpng google
|
libpng android
|
Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a cr…
|
NVD-CWE-noinfo
|
CVE-2016-3751
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265476
|
7.8 |
HIGH
Local
|
google
|
android
|
libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup syste…
|
CWE-20
Improper Input Validation
|
CVE-2016-3750
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265477
|
8.4 |
HIGH
Local
|
google
|
android
|
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 2816…
|
CWE-255
Credentials Management
|
CVE-2016-3749
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265478
|
8.4 |
HIGH
Local
|
google
|
android
|
The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-3748
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265479
|
7.8 |
HIGH
Local
|
google
|
android
|
Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain…
|
NVD-CWE-Other
|
CVE-2016-3747
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265480
|
7.8 |
HIGH
Local
|
google
|
android
|
Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain…
|
NVD-CWE-Other
|
CVE-2016-3746
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|