Google

Android

8158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2015-6643

  • EPSS 0.19%
  • Veröffentlicht 06.01.2016 19:59:08
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism via unspecified vectors, aka internal bug 25290269.

9.8

CVE-2015-6642

  • EPSS 0.72%
  • Veröffentlicht 06.01.2016 19:59:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or Signatur...

3.1

CVE-2015-6641

  • EPSS 0.37%
  • Veröffentlicht 06.01.2016 19:59:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427.

9.3

CVE-2015-6640

  • EPSS 0.73%
  • Veröffentlicht 06.01.2016 19:59:05
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The prctl_set_vma_anon_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one vma is accessed in a certain update action, which allows attackers to gain privileges or cause a denial of ser...

9.3

CVE-2015-6639

  • EPSS 6.91%
  • Veröffentlicht 06.01.2016 19:59:04
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875.

9.3

CVE-2015-6638

  • EPSS 0.47%
  • Veröffentlicht 06.01.2016 19:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908.

9.3

CVE-2015-6637

  • EPSS 0.63%
  • Veröffentlicht 06.01.2016 19:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013.

10

CVE-2015-6636

  • EPSS 2.06%
  • Veröffentlicht 06.01.2016 19:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670.

4.3

CVE-2015-5310

  • EPSS 1.17%
  • Veröffentlicht 06.01.2016 19:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets ...

9.3

CVE-2015-8507

  • EPSS 2.01%
  • Veröffentlicht 08.12.2015 23:59:21
  • Zuletzt bearbeitet 06.05.2026 22:30:45

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-201...