CVE-2016-6684: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243...

CVE-2016-3934: Improper Restriction of Operations within the Bounds of a Memory Buffer

drivers/media/platform/msm/camerav2/sensor/io/msmcameraccii2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka...

CVE-2016-3929: Undefined Security Weakness

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

CVE-2016-3926: Undefined Security Weakness

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953...

CVE-2016-6679: Exposure of Sensitive Information to an Unauthorized Actor

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR...

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions Information Disclosure Vulnerabilities

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions are Auto-Matrix USA's building automation front-end solutions for infrastructure, which are primarily deployed stateside in commercial facilities, critical manufacturing and energy and wastewater systems I&C. A...

PT-2016-5760

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 9 and Pixel C devices Description The issue allows attackers to gain privileges via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 9 and Pixel C devices,...

CVE-2016-3902: Exposure of Sensitive Information to an Unauthorized Actor

drivers/platform/msm/ipa/ipaqmiservice.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072...

CVE-2016-3939: Undefined Security Weakness

drivers/video/msm/mdss/mdssdebug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 30874196 and Qualcomm internal bug CR 1001224...

CVE-2016-6682: Exposure of Sensitive Information to an Unauthorized Actor

drivers/misc/qcom/qdsp6v2/audioutils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

PT-2016-7049

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 9 devices Description The issue allows attackers to obtain sensitive information via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 9 devices, update to a...

PT-2016-7047

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 9 devices Description The issue allows attackers to obtain sensitive information via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 9 devices, update to a...

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions File Containment Vulnerability

Auto-Matrix Aspect-Nexus and Aspect-Matrix Building Automation Front-End Solutions are Auto-Matrix USA's building automation front-end solutions for infrastructure, which are primarily deployed stateside in commercial facilities, critical manufacturing and energy and wastewater systems I&C. A...

PT-2016-7048

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 9 devices Description The issue allows attackers to obtain sensitive information via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 9 devices, update to a...

PT-2016-7033

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 5X devices Description The issue allows attackers to gain privileges via a crafted application, exploiting the Synaptics touchscreen driver. Recommendations For Android versions prior to 2016-10-05...

CVE-2016-6672: Undefined Security Weakness

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 30537088...

CVE-2016-3860: Exposure of Sensitive Information to an Unauthorized Actor

sound/soc/msm/qdsp6v2/audiocalibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29323142 and Qualcomm internal bug CR 1038127...

PT-2016-7050

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue allows attackers to obtain sensitive information via a crafted application. This is related to the Binder in the kernel on Nexus devices. Recommendations For Android versions prior to...

PT-2016-7039

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 on Nexus 6 devices Description The issue allows attackers to obtain sensitive information via a crafted application. Recommendations For Android versions prior to 2016-10-05 on Nexus 6 devices, update to a...

CVE-2016-3901: Integer Overflow or Wraparound

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999161 and Qualcomm...