CVE-2016-6700
- EPSS 0.84%
- Veröffentlicht 25.11.2016 16:59:05
- Zuletzt bearbeitet 06.05.2026 22:30:45
An elevation of privilege vulnerability in libzipfile in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue ...
CVE-2016-6698
- EPSS 0.42%
- Veröffentlicht 25.11.2016 16:59:04
- Zuletzt bearbeitet 06.05.2026 22:30:45
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its ...
CVE-2016-3907
- EPSS 0.37%
- Veröffentlicht 25.11.2016 16:59:03
- Zuletzt bearbeitet 06.05.2026 22:30:45
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its ...
CVE-2016-3906
- EPSS 0.42%
- Veröffentlicht 25.11.2016 16:59:01
- Zuletzt bearbeitet 06.05.2026 22:30:45
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its ...
CVE-2016-3904
- EPSS 0.64%
- Veröffentlicht 25.11.2016 16:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requir...
CVE-2016-7991
- EPSS 0.49%
- Veröffentlicht 31.10.2016 10:59:08
- Zuletzt bearbeitet 06.05.2026 22:30:45
On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized conf...
- EPSS 2.07%
- Veröffentlicht 31.10.2016 10:59:06
- Zuletzt bearbeitet 06.05.2026 22:30:45
On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code ...
CVE-2016-7989
- EPSS 0.6%
- Veröffentlicht 31.10.2016 10:59:05
- Zuletzt bearbeitet 06.05.2026 22:30:45
On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. Thi...
CVE-2016-7988
- EPSS 0.6%
- Veröffentlicht 31.10.2016 10:59:03
- Zuletzt bearbeitet 06.05.2026 22:30:45
On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar wi...
CVE-2016-6696
- EPSS 0.95%
- Veröffentlicht 10.10.2016 11:00:12
- Zuletzt bearbeitet 06.05.2026 22:30:45
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm ...