|
269821
|
5.5 |
MEDIUM
Local
|
google
|
android
|
The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE pe…
|
CWE-200
Information Exposure
|
CVE-2016-0831
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269822
|
6.5 |
MEDIUM
Adjacent
|
google
|
android
|
btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of config…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-0830
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269823
|
7.5 |
HIGH
Network
|
google
|
android
|
The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initial…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0829
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269824
|
7.5 |
HIGH
Network
|
google
|
android
|
The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0828
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269825
|
7.8 |
HIGH
Local
|
google
|
android
|
Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, a…
|
CWE-189
Numeric Errors
|
CVE-2016-0827
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269826
|
7.8 |
HIGH
Local
|
google
|
android
|
libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, whic…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0826
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269827
|
5.3 |
MEDIUM
Network
|
google
|
android
|
The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining…
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0825
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269828
|
5.3 |
MEDIUM
Network
|
google
|
android
|
libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, …
|
CWE-200 CWE-254
Information Exposure 7PK - Security Features
|
CVE-2016-0824
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269829
|
4.0 |
MEDIUM
Local
|
google linux
|
android linux_kernel
|
The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by r…
|
CWE-200
Information Exposure
|
CVE-2016-0823
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269830
|
7.0 |
HIGH
Local
|
google
|
android
|
The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-0822
|
2024-11-21 11:42 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|