CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3893
https://notcve.org/view.php?id=CVE-2016-3893
11 Sep 2016 — The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29512527 and Qualcomm internal bug CR856400. La función wcdcal_hwdep_ioctl_shared en sound/soc/codecs/wcdcal-hwdep.c en el códec de sonido Qualcomm en Android en versiones anteriores a 2016-09-05 en dispositivos Nexu... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 22EXPL: 0CVE-2016-3897
https://notcve.org/view.php?id=CVE-2016-3897
11 Sep 2016 — The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 includes a password in the return value of a toString method call, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25624963. La clase WifiEnterpriseConfig en net/wifi/WifiEnterpriseConfig.java en Wi-Fi en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2,... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3869
https://notcve.org/view.php?id=CVE-2016-3869
11 Sep 2016 — The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29009982 and Broadcom internal bug RB#96070. El controlador Wi-Fi Broadcom en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player y Pixel C permite a atacantes obtener privilegios a través de una aplicación manipulada, vulnerabilidad ta... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 22EXPL: 0CVE-2016-3896
https://notcve.org/view.php?id=CVE-2016-3896
11 Sep 2016 — AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attackers to obtain sensitive EmailAccountCacheProvider information via a crafted application, aka internal bug 29767043. AOSP Mail en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-09-01 permite a atacantes obtener información sensible de EmailAccountCacheProvider a través de una aplica... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3873
https://notcve.org/view.php?id=CVE-2016-3873
11 Sep 2016 — The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 29518457. El kernel de NVIDIA en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 9 permite a atacantes obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 29518457. • http://nvidia.custhelp.com/app/answers/detail/a_id/4561 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3874
https://notcve.org/view.php?id=CVE-2016-3874
11 Sep 2016 — CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array, which allows attackers to gain privileges via a crafted application that sends a WE_UNIT_TEST_CMD command, aka Android internal bug 29944562 and Qualcomm internal bug CR997797. CORE/HDD/src/wlan_hdd_wext.c en el controlador Wi-Fi Qualcomm en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 5X no valida correctamente los argumentos array,... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2016-3895
https://notcve.org/view.php?id=CVE-2016-3895
11 Sep 2016 — Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260. Desbordamiento de entero en la función Region::unflatten en libs/ui/Region.cpp en mediaserver en Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes obtener información sensible a través de una aplicaci... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-190: Integer Overflow or Wraparound CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-2016-3876
https://notcve.org/view.php?id=CVE-2016-3876
11 Sep 2016 — providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the SAFE_BOOT_DISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge (adb) tool, aka internal bug 29900345. providers/settings/SettingsProvider.java en Android 6.x en versiones anteriores a 2016-09-01 y 7.0 en versiones anteriores a 2016-09-01 permite a atacantes próximos físicamente eludir el mecanismo de protección SAFE_BOOT_DISALLO... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.6EPSS: 0%CPEs: 22EXPL: 0CVE-2016-3890
https://notcve.org/view.php?id=CVE-2016-3890
11 Sep 2016 — The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 mishandles socket close operations, which allows attackers to gain privileges via a crafted application, aka internal bug 28347842. La implementación del Java Debug Wire Protocol (JDWP) en adb/sockets.cpp en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versione... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3859
https://notcve.org/view.php?id=CVE-2016-3859
11 Sep 2016 — The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28815326 and Qualcomm internal bug CR1034641. El controlador de la cámara Qualcomm en Android en versiones anteriores a 2016-09-05 en dispositivos Nexus 5, 5X, 6 y 6P permite a atacantes obtener privilegios a través de una aplicación manipulada, vulnerabilidad también conocida como error interno de Android 28815326 y error interno d... • http://source.android.com/security/bulletin/2016-09-01.html • CWE-264: Permissions, Privileges, and Access Controls •