CVSS: 9.3EPSS: 0%CPEs: 18EXPL: 0CVE-2016-2481
https://notcve.org/view.php?id=CVE-2016-2481
13 Jun 2016 — The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532497. El componente mm-video-v4l2 venc en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x... • http://source.android.com/security/bulletin/2016-06-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.4EPSS: 0%CPEs: 22EXPL: 0CVE-2016-2463
https://notcve.org/view.php?id=CVE-2016-2463
13 Jun 2016 — Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419. Múltiples desbordamientos de entero en el componente h264dec en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4,... • http://source.android.com/security/bulletin/2016-06-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 18EXPL: 0CVE-2016-2484
https://notcve.org/view.php?id=CVE-2016-2484
13 Jun 2016 — libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793163. libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.... • http://source.android.com/security/bulletin/2016-06-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2470
https://notcve.org/view.php?id=CVE-2016-2470
13 Jun 2016 — The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27662174. El controlador Wi-Fi Qualcomm en Android en versiones anteriores a 2016-06-01 en dispositivos Nexus 7 (2013) permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido como error interno 27662174. • http://source.android.com/security/bulletin/2016-06-01.html •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2472
https://notcve.org/view.php?id=CVE-2016-2472
13 Jun 2016 — The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27776888. El controlador Wi-Fi Qualcomm en Android en versiones anteriores a 2016-06-01 en dispositivos Nexus 7 (2013) permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido como error interno 27776888. • http://source.android.com/security/bulletin/2016-06-01.html •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2016-2500
https://notcve.org/view.php?id=CVE-2016-2500
13 Jun 2016 — Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 19285814. Activity Manager en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-06-01 no finaliza adecuadamente los grupos de procesos, lo que permite a atacantes obtener información sensible a través de... • http://source.android.com/security/bulletin/2016-06-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 18EXPL: 0CVE-2016-2477
https://notcve.org/view.php?id=CVE-2016-2477
13 Jun 2016 — mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27251096. mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versione... • http://source.android.com/security/bulletin/2016-06-01.html • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2493
https://notcve.org/view.php?id=CVE-2016-2493
13 Jun 2016 — The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522. El controlador Broadcom Wi-Fi en Android en versiones anteriores a 2016-06-01 en dispositivos Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player y Pixel C permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido como error interno 26571522. • http://source.android.com/security/bulletin/2016-06-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-2496
https://notcve.org/view.php?id=CVE-2016-2496
13 Jun 2016 — The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796. La implementación permission-dialog Framework UI en Android 6.x en versiones anteriores a 2016-06-01 permite a atacantes llevar a cabo ataques tapjacking y acceder a archivos en almacenamiento privado arbitrarios creando una ventana superpuesta parcialmente, también c... • http://source.android.com/security/bulletin/2016-06-01.html • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2471
https://notcve.org/view.php?id=CVE-2016-2471
13 Jun 2016 — The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27773913. El controlador Wi-Fi Qualcomm en Android en versiones anteriores a 2016-06-01 en dispositivos Nexus 7 (2013) permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido como error interno 27773913. • http://source.android.com/security/bulletin/2016-06-01.html •