CVE-2016-0837

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read and memory corruption via a crafted media file, aka...

UBUNTU-CVE-2016-2414

The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider negative size values in font data, which allows remote attackers to cause a denial of service memory corruption and reboot loop via a crafted font, aka internal bug 26413177...

UBUNTU-CVE-2016-2413

media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...

Android Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media Codec in Android versions prior to 6.0 and prior to 6.0.1. A remote attacker can exploit this vulnerability to cau...

Cheetah Security Master Android International Password Bypass Vulnerability

Cheetah Security Master is a mobile security software from Cheetah Mobile. Cheetah Security Master suffers from a password bypass vulnerability, through which an attacker can bypass authentication and directly access encrypted information...

The vulnerability of the Android operating system allows a perpetrator to gain access to protected information in the TrustZone.

The vulnerability of the Android operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the protected TrustZone area by utilizing the kernel...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...

Android Qualcomm Power Management Component Power Elevation Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Power Management is a power management component developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm Power Management component in Android...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the libvpx library, which is part of the mediaserver component in the Android operating system, arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability of the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a local attacker to bypass security measures and delete data...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the MediaTek Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system allows a hacker to bypass security measures and obtain confidential information.

The vulnerability of the BnCrypto::onTransact function media/libmedia/ICrypto.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to bypass security measures and obtain confidential information, leading to incorrect...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the NuPlayer::GenericSource::notifyPreparedAndCleanup function located in media/libmediaplayerservice/nuplayer/GenericSource.cpp in the mediaserver component of the Android operating system exists due to improper management of the mDrmManagerClient objects. Exploiting this...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the getbuildid function in the elfutils.cpp file of the Debuggerd application on the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the CPU performance module of Qualcomm ARM’s Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the libstagefright component in the Android operating system’s media server arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption by using a specially crafted media file tha...

UBUNTU-CVE-2016-0828

The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an...

UBUNTU-CVE-2016-0832

Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25955042...

UBUNTU-CVE-2016-0831

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the Android operating system’s Native Frameworks library relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or bypass security mechanisms...