Google

Android

7930 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2013-7457

  • EPSS 0.06%
  • Veröffentlicht 11.07.2016 01:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application.

7.8

CVE-2016-5300

  • EPSS 2.2%
  • Veröffentlicht 16.06.2016 18:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists beca...

5.9

CVE-2012-6702

  • EPSS 0.63%
  • Veröffentlicht 16.06.2016 18:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.

5.5

CVE-2016-2500

  • EPSS 0.07%
  • Veröffentlicht 13.06.2016 01:59:38
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 19285814.

5.5

CVE-2016-2499

  • EPSS 0.07%
  • Veröffentlicht 13.06.2016 01:59:37
  • Zuletzt bearbeitet 12.04.2025 10:46:40

AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted app...

5.5

CVE-2016-2498

  • EPSS 0.07%
  • Veröffentlicht 13.06.2016 01:59:36
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access restrictions via a crafted application, aka internal bug 27777162.

10

CVE-2016-2496

  • EPSS 0.31%
  • Veröffentlicht 13.06.2016 01:59:35
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796.

7.1

CVE-2016-2495

  • EPSS 0.28%
  • Veröffentlicht 13.06.2016 01:59:34
  • Zuletzt bearbeitet 12.04.2025 10:46:40

SampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka inter...

9.3

CVE-2016-2494

  • EPSS 1.07%
  • Veröffentlicht 13.06.2016 01:59:33
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSys...

9.3

CVE-2016-2493

  • EPSS 0.04%
  • Veröffentlicht 13.06.2016 01:59:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522.