UBUNTU-CVE-2016-0827

Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, related to EffectBundle.cpp and...

UBUNTU-CVE-2016-0818

The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to...

Firefox 45 Fixes 40 Vulnerabilities, 22 Critical

Much like Google, which updated Chrome yesterday, Mozilla released a new version of Firefox on Tuesday, fixing 40 vulnerabilities in the browser. The update, Firefox 45, included eight bulletins rated critical and patched a handful of serious use-after-free vulnerabilities and a pair of buffer...

UBUNTU-CVE-2016-0802

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted wireless control message packets, aka internal bug 25306181...

UBUNTU-CVE-2016-0805

The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204...

Android SyncManager Denial of Service Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of SyncManager in versions of Android prior to 5.1.1 LMY49F, and 6.0 prior to 2016-01-01. A remote attacker exploiting the vulnerability can cause a denial of service...

Android Setup Wizard Elevation of Privilege Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of Setup Wizard in version 5.x prior to Android 5.1.1 LMY49F, and version 6.0 prior to 2016-01-01. An attacker in close physical proximity can exploit this vulnerability ...

UBUNTU-CVE-2015-6637

The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013...

UBUNTU-CVE-2015-6644

Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146...

Android Wi-Fi Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of Wi-Fi in versions prior to Android 5.1.1 LMY48Z, which can be exploited by remote attackers to obtain sensitive information...

Android System Server Information Disclosure Vulnerability (CNVD-2015-08051)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of System Server in versions prior to Android 6.0 2015-12-01, which can be exploited by a remote attacker to gain access to sensitive information via a constructed...

Android SystemUI Elevation of Privilege Vulnerability

Android is a cell phone operating system based on the Linux open kernel. Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, SystemUI has a security vulnerability in its implementation, which can be exploited by remote attackers to elevate privileges via a constructed application...

Android mediaserver memory corruption vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver, a version prior to Android 5.1.1 LMY48Z, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed...

Google AOSP Email App HTML Injection

https://labs.integrity.pt/articles/google-aosp-email-app-html-injection-2/ 1. Vulnerability Properties Title: Google AOSP Email App HTML Injection CVE ID: PendingCVSSv3 Base Score: 6.3 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Vendor: Google Products: AOSP Email App Advisory Release Date: 16 November...

Android Remote Elevation of Privilege Vulnerability (CNVD-2015-07365)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A remote elevation of privilege vulnerability exists in Android versions prior to 5.1.1 LMY48X and 6.0 prior to 2015. Allows an attacker to send commands to debug ports a...

UBUNTU-CVE-2015-6612

libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426...

Android Denial of Service Vulnerability (CNVD-2015-06587)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial of service vulnerability exists in Android versions prior to 5.1.1, LMY48T, which allows remote attackers to execute arbitrary code or cause a denial of service...

Android Security Restriction Bypass Vulnerability (CNVD-2015-06576)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. A security restriction bypass vulnerability exists in LMY48I, a version of Android prior to 5.1.1. Allows an attacker to trigger a faulty process load via a crafted...

Multiple Buffer Overflow Vulnerabilities in Android

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. Multiple buffer overflow vulnerabilities exist in Android versions prior to 5.1.1, LMY48I. Allowing a remote attacker to execute arbitrary code via an invalid NA unit size...

Android Integer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An integer overflow exists in the 'GraphicBuffer::unflatten' function in the platform/frameworks/native/libs/ui/GraphicBuffer.cpp file in Android 5.0 and earlier versions...