CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-9783
https://notcve.org/view.php?id=CVE-2014-9783
11 Jul 2016 — drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831 and Qualcomm internal bug CR511382. drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 7 (2013) no valida determinados valores,... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3815
https://notcve.org/view.php?id=CVE-2016-3815
11 Jul 2016 — The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28522274. El controlador de cámara NVIDIA en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 9 permite a atacantes obtener información sensible a través de una aplicación manipulada, también conocido como error interno de Android 28522274. • http://nvidia.custhelp.com/app/answers/detail/a_id/4561 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3798
https://notcve.org/view.php?id=CVE-2016-3798
11 Jul 2016 — The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174490 and MediaTek internal bug ALPS02703105. El controlador del sensor de hardware de MediaTek en Android en versiones anteriores a 2016-07-05 en dispositivos Android One permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido como error interno de Android 28174490 y error interno de MediaTe... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-8888
https://notcve.org/view.php?id=CVE-2015-8888
11 Jul 2016 — Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR813933. Desbordamiento de entero en app/aboot/aboot.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 5 permite a atacantes eludir restricciones destinadas al acceso a... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-189: Numeric Errors CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-9800
https://notcve.org/view.php?id=CVE-2014-9800
11 Jul 2016 — Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478. Desbordamiento de entero en lib/heap/heap.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 5 y 7 (2013) permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido c... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-189: Numeric Errors CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-9802
https://notcve.org/view.php?id=CVE-2014-9802
11 Jul 2016 — Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108. Múltiples desbordamientos de entero en lib/libfdt/fdt.c en los componentes de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 5 y 7 (2013) permiten a atacantes obtener privilegios a través de una aplicación manipul... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3767
https://notcve.org/view.php?id=CVE-2016-3767
11 Jul 2016 — The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28169363 and MediaTek internal bug ALPS02689526. El controlador Wi-Fi de MediaTek en Android en versiones anteriores a 2016-07-05 en dispositivos Android One permite a atacantes obtener privilegios a través de una aplicación manipulada, también conocido como error interno de Android 28169363 y error interno de MediaTek ALPS02689526. • http://source.android.com/security/bulletin/2016-07-01.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2505
https://notcve.org/view.php?id=CVE-2016-2505
11 Jul 2016 — mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28333006. mpeg2ts/ATSParser.cpp en libstagefright en mediaserver en Android 6.x en versiones anteriores a 2016-07-01 no valida una determinada longitud de sección, lo que permite a atacantes remotos ejecutar un código arbitrario o p... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 22EXPL: 0CVE-2016-2507
https://notcve.org/view.php?id=CVE-2016-2507
11 Jul 2016 — Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28532266. Desbordamiento de entero en codecs/on2/h264dec/source/h264bsd_storage.c en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versio... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-189: Numeric Errors •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2014-9798
https://notcve.org/view.php?id=CVE-2014-9798
11 Jul 2016 — platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service (OS outage) via a crafted application, aka Android internal bug 28821448 and Qualcomm internal bug CR681965. platform/msm_shared/dev_tree.c en el gestor de arranque de Qualcomm en Android en versiones anteriores a 2016-07-05 en dispositivos Nexus 5 no comprueba la relación entr... • http://source.android.com/security/bulletin/2016-07-01.html • CWE-284: Improper Access Control •