VYPR

CVEs

398,550 total · page 6435 of 7,971

AllCriticalHighKEV
  • CVE-2016-3751HigJul 11, 2016
    Libpng
    Libpng
    risk 0.51cvss 7.8epss 0.00

    Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem…

  • CVE-2016-3750HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup system call, which allows attackers to bypass an isolation protection mechanism via a…

  • CVE-2016-3749HigJul 11, 2016
    Google
    Android
    risk 0.55cvss 8.4epss 0.00

    server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930.

  • CVE-2016-3748HigJul 11, 2016
    Google
    Android
    risk 0.55cvss 8.4epss 0.00

    The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804.

  • CVE-2016-3747HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or…

  • CVE-2016-3746HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or…

  • CVE-2016-3745CriJul 11, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or…

  • CVE-2016-3744HigJul 11, 2016
    Google
    Android
    risk 0.49cvss 7.5epss 0.00

    Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to gain privileges via a crafted pairing operation, aka internal bug 27930580.

  • CVE-2016-3743CriJul 11, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656.

  • CVE-2016-3742CriJul 11, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659.

  • CVE-2016-3741CriJul 11, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.01

    The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661.

  • CVE-2016-2508HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.02

    media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of…

  • CVE-2016-2507HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2016-2506CriJul 11, 2016
    Google
    Android
    risk 0.64cvss 9.8epss 0.02

    DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows remote attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2016-2505HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug…

  • CVE-2016-2503HigJul 11, 2016
    Qualcomm
    GPU driver
    risk 0.51cvss 7.8epss 0.00

    The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal bug CR1006067.

  • CVE-2016-2502HigJul 11, 2016
    Qualcomm
    Qualcomm USB driver
    risk 0.51cvss 7.8epss 0.00

    drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a large size in a GSER_IOCTL ioctl call, aka Android internal bug 27657963 and Qualcomm internal bug CR997044.

  • CVE-2016-2501HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 27890772 and Qualcomm internal bug CR1001092.

  • CVE-2016-2068HigJul 11, 2016
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.01

    The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (integer overflow, and buffer overflow…

  • CVE-2016-2067HigJul 11, 2016
    Linux
    Kernel
    risk 0.51cvss 7.8epss 0.01

    drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSL_MEMFLAGS_GPUREADONLY flag, which allows attackers to gain…

  • CVE-2015-8893MedJul 11, 2016
    Qualcomm
    aboot
    risk 0.36cvss 5.5epss 0.00

    app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275.

  • CVE-2015-8892HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998.

  • CVE-2015-8891HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug…

  • CVE-2015-8890HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID Partition Table (GPT) data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard…

  • CVE-2015-8889HigJul 11, 2016
    Qualcomm
    aboot
    risk 0.51cvss 7.8epss 0.01

    The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android internal bug 28822677 and Qualcomm internal bug CR804067.

  • CVE-2015-8888HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm…

  • CVE-2014-9803HigJul 11, 2016
    Linux
    Kernel
    risk 0.44cvss 7.8epss 0.01

    arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug…

  • CVE-2014-9802HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108.

  • CVE-2014-9801HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078.

  • CVE-2014-9800HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478.

  • CVE-2014-9799HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an…

  • CVE-2014-9798MedJul 11, 2016
    Google
    Android
    risk 0.36cvss 5.5epss 0.00

    platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service (OS outage) via a crafted application, aka…

  • CVE-2014-9796HigJul 11, 2016
    Qualcomm
    aboot
    risk 0.51cvss 7.8epss 0.01

    app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug…

  • CVE-2014-9795HigJul 11, 2016
    Qualcomm
    aboot
    risk 0.51cvss 7.8epss 0.01

    app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and…

  • CVE-2014-9793HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal…

  • CVE-2014-9792HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data type, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769399 and Qualcomm internal bug…

  • CVE-2014-9790HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.00

    drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and write operations, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769136…

  • CVE-2014-9789HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug…

  • CVE-2014-9788HigJul 11, 2016
    Qualcomm
    voice drivers
    risk 0.51cvss 7.8epss 0.01

    Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872.

  • CVE-2014-9787HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764.

  • CVE-2014-9786HigJul 11, 2016
    Qualcomm
    MSM
    risk 0.51cvss 7.8epss 0.01

    Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug…

  • CVE-2014-9785HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal…

  • CVE-2014-9784HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug…

  • CVE-2014-9783HigJul 11, 2016
    Qualcomm
    MSM
    risk 0.51cvss 7.8epss 0.01

    drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831…

  • CVE-2014-9782HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka…

  • CVE-2014-9781HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471.

  • CVE-2014-9780HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate start and length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28602014 and…

  • CVE-2014-9779HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679.

  • CVE-2014-9778HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted…

  • CVE-2014-9777HigJul 11, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application,…