Google

Android

7930 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2016-0825

  • EPSS 0.09%
  • Veröffentlicht 12.03.2016 21:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka interna...

4

CVE-2016-0823

  • EPSS 0.02%
  • Veröffentlicht 12.03.2016 21:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 257...

5.3

CVE-2016-0824

  • EPSS 0.16%
  • Veröffentlicht 12.03.2016 21:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or Signature...

7.6

CVE-2016-0822

  • EPSS 0.04%
  • Veröffentlicht 12.03.2016 21:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.

5.5

CVE-2016-0821

  • EPSS 0.01%
  • Veröffentlicht 12.03.2016 21:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a pois...

9.3

CVE-2016-0820

  • EPSS 0.02%
  • Veröffentlicht 12.03.2016 21:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358.

9.3

CVE-2016-0819

  • EPSS 0.04%
  • Veröffentlicht 12.03.2016 21:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 25364034.

5.9

CVE-2016-0818

  • EPSS 0.06%
  • Veröffentlicht 12.03.2016 21:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA,...

10

CVE-2016-0816

  • EPSS 2.23%
  • Veröffentlicht 12.03.2016 21:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka ...

10

CVE-2016-0815

  • EPSS 1.9%
  • Veröffentlicht 12.03.2016 21:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of ser...