|
266011
|
7.8 |
HIGH
Local
|
google
|
android
|
Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileg…
|
CWE-264 CWE-119
Permissions, Privileges, and Access Controls Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-3758
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266012
|
7.0 |
HIGH
Local
|
google
|
android
|
The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafte…
|
CWE-20
Improper Input Validation
|
CVE-2016-3757
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266013
|
7.5 |
HIGH
Network
|
google
|
android
|
Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of partitions, which allows remote attacker…
|
CWE-20
Improper Input Validation
|
CVE-2016-3756
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266014
|
7.5 |
HIGH
Network
|
google
|
android
|
decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service (device hang or r…
|
CWE-20
Improper Input Validation
|
CVE-2016-3755
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266015
|
7.5 |
HIGH
Network
|
google
|
android
|
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of serv…
|
CWE-399
Resource Management Errors
|
CVE-2016-3754
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266016
|
7.5 |
HIGH
Network
|
google
|
android
|
mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135.
|
CWE-200
Information Exposure
|
CVE-2016-3753
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266017
|
7.8 |
HIGH
Local
|
google
|
android
|
internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attackers to gain privileges via a crafted application,…
|
CWE-19 CWE-254
Data Processing Errors 7PK - Security Features
|
CVE-2016-3752
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266018
|
7.8 |
HIGH
Local
|
libpng google
|
libpng android
|
Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a cr…
|
NVD-CWE-noinfo
|
CVE-2016-3751
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266019
|
7.8 |
HIGH
Local
|
google
|
android
|
libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup syste…
|
CWE-20
Improper Input Validation
|
CVE-2016-3750
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266020
|
8.4 |
HIGH
Local
|
google
|
android
|
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 2816…
|
CWE-255
Credentials Management
|
CVE-2016-3749
|
2024-11-21 11:50 |
2016-07-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|