PT-2016-7033

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 5X devices Description The issue allows attackers to gain privileges via a crafted application, exploiting the Synaptics touchscreen driver. Recommendations For Android versions prior to 2016-10-05...

PT-2016-7039

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 6 devices Description The issue allows attackers to obtain sensitive information via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 6 devices, update to a...

CVE-2016-6677: Exposure of Sensitive Information to an Unauthorized Actor

The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955...

CVE-2016-3934: Improper Restriction of Operations within the Bounds of a Memory Buffer

drivers/media/platform/msm/camerav2/sensor/io/msmcameraccii2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka...

CVE-2016-3930: Undefined Security Weakness

The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28760138...

CVE-2016-6672: Undefined Security Weakness

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 30537088...

CVE-2016-6685: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30402628...

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions Information Disclosure Vulnerabilities

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions are Auto-Matrix USA's building automation front-end solutions for infrastructure, which are primarily deployed stateside in commercial facilities, critical manufacturing and energy and wastewater systems I&C. A...

CVE-2016-3938: Undefined Security Weakness

drivers/video/msm/mdss/mdssmdpoverlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 30019716 and Qualcomm internal bug CR 1049232...

CVE-2016-6678: Exposure of Sensitive Information to an Unauthorized Actor

The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 29914434...

CVE-2016-3905: Undefined Security Weakness

CORE/HDD/src/wlanhddmain.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application that sends a SENDACTIONFRAME command, aka Android internal bug 28061823 and Qualcomm internal bug CR 1001449...

CVE-2016-6690: Improper Access Control

The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a denial of service reboot via a crafted application, aka internal bug 28838221...

PT-2016-5760

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 9 and Pixel C devices Description The issue allows attackers to gain privileges via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 9 and Pixel C devices,...

CVE-2016-3931: Undefined Security Weakness

drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418...

CVE-2016-3929: Undefined Security Weakness

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

CVE-2016-3940: Undefined Security Weakness

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 30141991...

CVE-2016-6675: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a linkspeed ioctl call, aka Android...

CVE-2016-6676: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in CORE/HDD/src/wlanhddcfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a GETCFG ioctl call, aka Android intern...

CVE-2016-3926: Undefined Security Weakness

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953...

PT-2016-7049

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 9 devices Description The issue allows attackers to obtain sensitive information via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 9 devices, update to a...