Google

Android

7895 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2016-3840

  • EPSS 2.3%
  • Veröffentlicht 05.08.2016 20:59:31
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Conscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, which allows remote attackers to execute arbitrary code via unspecified vectors, aka internal bug 28751...

5.5

CVE-2016-3839

  • EPSS 0.07%
  • Veröffentlicht 05.08.2016 20:59:30
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of Bluetooth 911 functionality) via a crafted application that sends a signal to a Bluetooth ...

5.5

CVE-2016-3838

  • EPSS 0.07%
  • Veröffentlicht 05.08.2016 20:59:29
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Android 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked-screen 911 functionality) via a crafted application that uses the app-pinning feature, aka internal bug 28761672.

5.5

CVE-2016-3837

  • EPSS 0.11%
  • Veröffentlicht 05.08.2016 20:59:28
  • Zuletzt bearbeitet 12.04.2025 10:46:40

service/jni/com_android_server_wifi_WifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too f...

5.5

CVE-2016-3836

  • EPSS 0.11%
  • Veröffentlicht 05.08.2016 20:59:27
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, a...

5.5

CVE-2016-3835

  • EPSS 0.11%
  • Veröffentlicht 05.08.2016 20:59:25
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to obtain sensitive informat...

5.5

CVE-2016-3834

  • EPSS 0.11%
  • Veröffentlicht 05.08.2016 20:59:24
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access restrictions and obtain sensitive information about ANW buffer addresses via a crafted applicatio...

9.3

CVE-2016-3833

  • EPSS 0.05%
  • Veröffentlicht 05.08.2016 20:59:23
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS permissions, which allows attackers to bypass intended access restrictions via a crafted appli...

8.3

CVE-2016-3832

  • EPSS 0.07%
  • Veröffentlicht 05.08.2016 20:59:22
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, which allows attackers to bypass an unspecified protection mechanis...

7.5

CVE-2016-3831

  • EPSS 0.5%
  • Veröffentlicht 05.08.2016 20:59:21
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device crash) via a NITZ time value of 2038-01-19 or later that is mishandled...