Google

Android

7895 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2016-3766

  • EPSS 0.73%
  • Veröffentlicht 11.07.2016 02:00:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of s...

7.7

CVE-2016-3765

  • EPSS 0.06%
  • Veröffentlicht 11.07.2016 02:00:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted application, aka internal bug 28168413.

5

CVE-2016-3764

  • EPSS 0.06%
  • Veröffentlicht 11.07.2016 02:00:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, ...

5

CVE-2016-3763

  • EPSS 0.11%
  • Veröffentlicht 11.07.2016 02:00:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not ensure that URL information is restricted to a scheme, host, and port, which allo...

9.3

CVE-2016-3762

  • EPSS 0.04%
  • Veröffentlicht 11.07.2016 02:00:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application that uses (1) the AF_MSM_IPC socket class or (2) another socket class that is unrecognize...

4

CVE-2016-3761

  • EPSS 0.02%
  • Veröffentlicht 11.07.2016 02:00:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300...

7.5

CVE-2016-3760

  • EPSS 0.05%
  • Veröffentlicht 11.07.2016 02:00:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user, aka internal bug 27410683.

5

CVE-2016-3759

  • EPSS 0.06%
  • Veröffentlicht 11.07.2016 01:59:59
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application that leverages priv-app access to insert a backup transport, aka internal bug 28406080.

9.3

CVE-2016-3758

  • EPSS 0.05%
  • Veröffentlicht 11.07.2016 01:59:58
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides a long f...

7

CVE-2016-3757

  • EPSS 0.01%
  • Veröffentlicht 11.07.2016 01:59:57
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of ...