CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6677
https://notcve.org/view.php?id=CVE-2016-6677
10 Oct 2016 — The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955. El controlador NVIDIA GPU en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30259955. • http://source.android.com/security/bulletin/2016-10-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6678
https://notcve.org/view.php?id=CVE-2016-6678
10 Oct 2016 — The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 29914434. El controlador Motorola USBNet en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 6 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 29914434. • http://source.android.com/security/bulletin/2016-10-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.1EPSS: 2%CPEs: 23EXPL: 3CVE-2016-5348 – Google Android - 'gpsOneXtra' Data Files Denial of Service
https://notcve.org/view.php?id=CVE-2016-5348
10 Oct 2016 — The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service (memory consumption, and device hang or reboot) via a large xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 29555864. El componente GPS en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5... • https://packetstorm.news/files/id/139033 • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 23EXPL: 0CVE-2016-3883
https://notcve.org/view.php?id=CVE-2016-3883
11 Sep 2016 — internal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not properly construct warnings about premium SMS messages, which allows attackers to spoof the premium-payment confirmation dialog via a crafted application, aka internal bug 28557603. internal/telephony/SMSDispatcher.java en Telephony en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versi... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-284: Improper Access Control •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-2016-3889
https://notcve.org/view.php?id=CVE-2016-3889
11 Sep 2016 — Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing (1) an external tile from a system application, (2) the help feature, or (3) the Settings application during a pre-setup stage, aka internal bug 29194585. Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes próximos físicamente eludir el mecanismo de protección Factory Reset Protectio... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.1EPSS: 0%CPEs: 23EXPL: 0CVE-2016-3881
https://notcve.org/view.php?id=CVE-2016-3881
11 Sep 2016 — The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service (buffer over-read, and device hang or reboot) via a crafted media file, aka internal bug 30013856. La función decoder_peek_si_internal en vp9/vp9_dx_iface.c en libvpx en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anterio... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 7EXPL: 0CVE-2016-3885
https://notcve.org/view.php?id=CVE-2016-3885
11 Sep 2016 — debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles the interaction between PTRACE_ATTACH operations and thread exits, which allows attackers to gain privileges via a crafted application, aka internal bug 29555636. debuggerd/debuggerd.cpp en Debuggerd en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 20... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3894
https://notcve.org/view.php?id=CVE-2016-3894
11 Sep 2016 — The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29618014 and Qualcomm internal bug CR1042033. El componente DMA Qualcomm en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 6 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 29618014 y error interno de Qualcomm CR10... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 23EXPL: 0CVE-2016-3872
https://notcve.org/view.php?id=CVE-2016-3872
11 Sep 2016 — Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to gain privileges via a crafted application, aka internal bug 29421675. Desbordamiento de búfer en codecs/on2/dec/SoftVPX.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1, 6.x en versi... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 22EXPL: 0CVE-2016-3879
https://notcve.org/view.php?id=CVE-2016-3879
11 Sep 2016 — arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service (NULL pointer dereference, and device hang or reboot) via a crafted media file, aka internal bug 29770686. arm-wt-22k/lib_src/eas_mdls.c en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-09-01... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-284: Improper Access Control •