Apple macOS Sierra Bluetooth Memory Misreference Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A memory misreference vulnerability exists in Bluetooth in Apple macOS Sierra. An attacker can exploit this vulnerability with an application to execute arbitrar...

Google Android Audioserver Elevation of Privilege Vulnerability

Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability through a specially crafted application that can elevate privileges...

Google Nexus Broadcom Wi-Fi Driver elevation of privilege vulnerability (CNVD-2017-00573)

Android on Nexus 6P, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for Nexus 6P smart device, etc. The Broadcom Wi-Fi Driver is a Wi-Fi driver module developed by Broadcom that is used in the Nexus 6P. Broadcom Wi-Fi Driver is a Wi-Fi...

Google Android Mediaserver Component Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A security vulnerability exists in the Google Android Mediaserver component that allows remote attackers to exploit the vulnerabilit...

Microsoft Windows Video Control Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Video Control is one of the video control components. A remote code execution vulnerability exists in Microsoft Windows Video Control that stems from the program failing to properly...

Microsoft VHD Driver Elevation of Privilege Vulnerability (CNVD-2016-11024)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Windows VHD is a virtual hard disk driver. An elevation of privilege vulnerability exists in the Microsoft VHD driver. When the Windows Virtual Hard Disk Driver fails to properly handle user access to...

CVE-2016-0070

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitiv...

Android Qualcomm video driver privilege acquisition vulnerability (CNVD-2016-09389)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Video Driver is a video driver developed by Qualcomm. A security vulnerability exists in the drivers/video/msm/mdss/mdssmdpoverlay.c file in the Qualcomm video driver in...

Android Qualcomm QDSP6v2 Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Qualcomm QDSP6v2 driver is one of the Qualcomm digital signal processor drivers. An information disclosure vulnerability exists in the drivers/misc/qcom/qdsp6v2/audioutils.c file in...

CVE-2016-6686

The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30163101...

CVE-2016-6682

drivers/misc/qcom/qdsp6v2/audioutils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2016-6680

CORE/HDD/src/wlanhddwext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes an iwsetpriv ioctl call, aka Android internal bug 29982678 and Qualcomm internal bug CR...

CVE-2016-6674

systemserver in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380...

CVE-2016-3937

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and MediaTek internal bug ALPS02834874...

CVE-2016-3936

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568...

CVE-2016-3935

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999665 and Qualcomm...

CVE-2016-3933

mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 29421408...

CVE-2016-3909

The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30033990...

CVE-2016-3902

drivers/platform/msm/ipa/ipaqmiservice.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072...

UBUNTU-CVE-2016-3922

libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka internal bug 30202619...