CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6698
https://notcve.org/view.php?id=CVE-2016-6698
25 Nov 2016 — An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30741851. References: Qualcomm QC-CR#1058826. Una vulnerabilidad de divulgación de información en componentes Qualcomm incluyendo el con... • http://www.securityfocus.com/bid/94139 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-6739
https://notcve.org/view.php?id=CVE-2016-6739
25 Nov 2016 — An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30074605. References: Qualcomm QC-CR#1049826. Una vulnerabilidad de elevación de privilegio en el controlador de cámara Qualcomm en Android en versiones anteriores a 05-11-2016 podría habilitar a una aplicac... • http://www.securityfocus.com/bid/94142 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6732
https://notcve.org/view.php?id=CVE-2016-6732
25 Nov 2016 — An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30906599. References: NVIDIA N-CVE-2016-6732. Una vulnerabilidad de elevación de privilegio en el controlador NVIDIA GPU en Android en... • http://www.securityfocus.com/bid/94140 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6733
https://notcve.org/view.php?id=CVE-2016-6733
25 Nov 2016 — An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30906694. References: NVIDIA N-CVE-2016-6733. Una vulnerabilidad de elevación de privilegio en el controlador NVIDIA GPU en Android en... • http://www.securityfocus.com/bid/94140 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6736
https://notcve.org/view.php?id=CVE-2016-6736
25 Nov 2016 — An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30953284. References: NVIDIA N-CVE-2016-6736. Una vulnerabilidad de elevación de privilegio en el controlador NVIDIA GPU en Android en... • http://www.securityfocus.com/bid/94140 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6701
https://notcve.org/view.php?id=CVE-2016-6701
25 Nov 2016 — A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of the gallery process. Android ID: A-30190637. Una vulnerabilidad de ejecución remota de código en libskia en Android 7.0 en versiones anteriores a 01-11-2016 podría habilitar a un atacante que utiliza un archivo... • http://www.securityfocus.com/bid/94162 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-284: Improper Access Control •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-6741
https://notcve.org/view.php?id=CVE-2016-6741
25 Nov 2016 — An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30559423. References: Qualcomm QC-CR#1060554. Una vulnerabilidad de elevación de privilegio en el controlador de cámara Qualcomm en Android en versiones anteriores a 05-11-2016 podría habilitar a una aplicac... • http://www.securityfocus.com/bid/94142 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.8EPSS: 3%CPEs: 6EXPL: 2CVE-2016-6754 – Google Android - 'BadKernel' Remote Code Execution
https://notcve.org/view.php?id=CVE-2016-6754
25 Nov 2016 — A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937. Una vulnerabilidad de ejecución de código remoto en Webview en Android 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en ve... • https://www.exploit-db.com/exploits/40846 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3931
https://notcve.org/view.php?id=CVE-2016-3931
10 Oct 2016 — drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418. drivers/misc/qseecom.c en el controlador Qualcomm QSEE Communicator en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 5X, Nexus 6, Nexus 6P y Android One permite a atacantes obtener privilegios a través de un... • http://source.android.com/security/bulletin/2016-10-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6688
https://notcve.org/view.php?id=CVE-2016-6688
10 Oct 2016 — The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30593080. El generador de perfiles de NVIDIA en Android en versiones anteriores a 2016-10-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, vulnerabilidad también conocida como error interno 30593080. • http://source.android.com/security/bulletin/2016-10-01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •