Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3820 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:30.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28673410. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92228 - https://android.googlesource.com/platform/external/libavc/+/a78887bcffbc2995cf9ed72e0697acf560875e9e
CVE ID: CVE-2016-3821 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:30.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference or memory corruption) via a crafted media file, aka internal bug 28166152. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/av/+/42a25c
/source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/av/+/42a25c46b844518ff0d0b920c20c519e1417be69 - http://www.securityfocus.com/bid/92228
CVE ID: CVE-2016-3822 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92226 - https://android.googlesource.com/platform/external/jhead/+
in/2016-08-01.html - http://www.securityfocus.com/bid/92226 - https://android.googlesource.com/platform/external/jhead/+/bae671597d47b9e5955c4cb742e468cebfd7ca6b - http://www.debian.org/security/2017/dsa-3825
CVE ID: CVE-2016-3823 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:30.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to gain privileges via a crafted application, aka internal bug 28815329. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/7558d03e6498e970b761aa44fff6b2c659202d95 - htt
01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/7558d03e6498e970b761aa44fff6b2c659202d95 - http://www.securityfocus.com/bid/92218
CVE ID: CVE-2016-3824 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows attackers to gain privileges via a crafted application, aka internal bug 28816827. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92218 - https://android.googlesource.com/platform/frameworks/av/+/b351eabb428c7ca85a34513
tp://www.securityfocus.com/bid/92218 - https://android.googlesource.com/platform/frameworks/av/+/b351eabb428c7ca85a34513c64601f437923d576
CVE ID: CVE-2016-3825 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates an incorrect amount of memory, which allows attackers to gain privileges via a crafted application, aka internal bug 28816964. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/d575ecf607056d8e3328ef2eb56c52e98f81e87d - http://www.securityfoc
ndroid.googlesource.com/platform/hardware/qcom/media/+/d575ecf607056d8e3328ef2eb56c52e98f81e87d - http://www.securityfocus.com/bid/92218
CVE ID: CVE-2016-3826 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the reply size for an AudioFlinger effect command, which allows attackers to gain privileges via a crafted application, aka internal bug 29251553. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92218 - https://android.googlesource.com/platform/frameworks/av
letin/2016-08-01.html - http://www.securityfocus.com/bid/92218 - https://android.googlesource.com/platform/frameworks/av/+/9cd8c3289c91254b3955bd7347cf605d6fa032c6
CVE ID: CVE-2016-3827 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28816956. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92221 - https://android.googlesource.com/platform/frameworks/av/+/a4567c66f4764442c6cb7b5c1858810194480fb5
CVE ID: CVE-2016-3828 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28835995. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92221 - https://android.googlesource.com/platform/external/libavc/+/7554755536019e439433c515eeb44e701fb3bfb2
CVE ID: CVE-2016-3829 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29023649. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/external/libavc/+/326fe991a4b7971e8aeaf4ac775491dd8abd85bb - http://www.securityfocus.com/bid/92221
CVE ID: CVE-2016-3830 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device hang or reboot) via crafted ADTS data, aka internal bug 29153599. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/av/+/8e438e153f661e9df8db0ac41d587e940352df06 - http://www.securityfoc
ps://android.googlesource.com/platform/frameworks/av/+/8e438e153f661e9df8db0ac41d587e940352df06 - http://www.securityfocus.com/bid/92221
CVE ID: CVE-2016-3831 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device crash) via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635, related to a "Year 2038 problem." Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92230 - https://android.googlesource.co
android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92230 - https://android.googlesource.com/platform/frameworks/opt/telephony/+/f47bc301ccbc5e6d8110afab5a1e9bac1d4ef058
CVE ID: CVE-2016-3832 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:30.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 do not ensure that package data originated from the Package Manager, which allows attackers to bypass an unspecified protection mechanism via a crafted application, aka internal bug 28795098. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/base/+/e7cf91a198de995c7440b3b64352effd2e30990
in/2016-08-01.html - https://android.googlesource.com/platform/frameworks/base/+/e7cf91a198de995c7440b3b64352effd2e309906 - http://www.securityfocus.com/bid/92232
CVE ID: CVE-2016-3833 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGE_USERS and CREATE_USERS permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka internal bug 29189712. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/base/+/01875b0274e74f97edf6b0d5c92de822e0555d03 - https://android.g
https://android.googlesource.com/platform/frameworks/base/+/01875b0274e74f97edf6b0d5c92de822e0555d03 - https://android.googlesource.com/platform/frameworks/base/+/4e4743a354e26467318b437892a9980eb9b8328a - http://www.securityfocus.com/bid/92225
CVE ID: CVE-2016-3834 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allow attackers to bypass intended access restrictions and obtain sensitive information about ANW buffer addresses via a crafted application, aka internal bug 28466701. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92238 - https://android.googlesource.com/platform/frameworks/av/+/1f24c730ab6ca5aff1e3137b34
//www.securityfocus.com/bid/92238 - https://android.googlesource.com/platform/frameworks/av/+/1f24c730ab6ca5aff1e3137b340b8aeaeda4bdbc
CVE ID: CVE-2016-3835 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 28920116. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/7558d03e6498e970b761aa44fff6b2c65
etin/2016-08-01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/7558d03e6498e970b761aa44fff6b2c659202d95 - http://www.securityfocus.com/bid/92233
CVE ID: CVE-2016-3836 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/native/+/3bcf0caa8cca9143443814b36676b3bae33a4368 - http://www.securityfocus
ndroid.googlesource.com/platform/frameworks/native/+/3bcf0caa8cca9143443814b36676b3bae33a4368 - http://www.securityfocus.com/bid/92224
CVE ID: CVE-2016-3837 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:30.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: service/jni/com_android_server_wifi_WifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too few characters, aka internal bug 28164077. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/a209ff12ba9617c10550678ff93d01fb72a33399 - ht
html - https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/a209ff12ba9617c10550678ff93d01fb72a33399 - http://www.securityfocus.com/bid/92235
CVE ID: CVE-2016-3838 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked-screen 911 functionality) via a crafted application that uses the app-pinning feature, aka internal bug 28761672. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/frameworks/base/+/468651c86a8adb7aa56c708d2348e99022088af3 - http://www.securityfocus.com/bid/92244
CVE ID: CVE-2016-3839 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of Bluetooth 911 functionality) via a crafted application that sends a signal to a Bluetooth process, aka internal bug 28885210. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/system/bt/+/472271b153c5dc53c28beac55480a8d8434b2d5c - http://www.securityfoc
https://android.googlesource.com/platform/system/bt/+/472271b153c5dc53c28beac55480a8d8434b2d5c - http://www.securityfocus.com/bid/92242
CVE ID: CVE-2016-3840 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Conscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, which allows remote attackers to execute arbitrary code via unspecified vectors, aka internal bug 28751153. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://android.googlesource.com/platform/external/conscrypt/+/5af5e93463f4333187e7e35f3bd2b846654aa214 - http://www.securityfocus.com/bid/92229
CVE ID: CVE-2016-3841 State: PUBLISHED Published: 2016-08-06T20:00:00 Last Updated: 2024-08-06T00:10:31.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://rhn.redhat.com/errata/RHSA-2016-0855.html - https://github.com/torvalds/linux/commit/45f6fad84cc305103b28d73482b344d7f5b76f39 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http
torvalds/linux/commit/45f6fad84cc305103b28d73482b344d7f5b76f39 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3 - http://www.securityfocus.com/bid/92227 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45f6fad84cc305103b28d73482b344d7f5b76f39 - http://rhn.redhat.com/errata/RHSA-2016-2695.html
CVE ID: CVE-2016-3842 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm internal bug CR1002974. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92220
CVE ID: CVE-2016-3843 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870 and Qualcomm internal bug CR1011071. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92237 - http://www.securityfocus.com/
e.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92237 - http://www.securityfocus.com/bid/92250
CVE ID: CVE-2016-3844 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92241
CVE ID: CVE-2016-3845 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28399876. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92246
CVE ID: CVE-2016-3846 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92240
CVE ID: CVE-2016-3847 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28871433. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92231 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-3848 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28919417. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92231
CVE ID: CVE-2016-3849 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28939740. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92243
CVE ID: CVE-2016-3850 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted header field in a boot image, aka Android internal bug 27917291 and Qualcomm internal bug CR945164. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=030371d45a9dcda4d0cc3c76647e753a1cc1b782 - http://www.securit
https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=030371d45a9dcda4d0cc3c76647e753a1cc1b782 - http://www.securityfocus.com/bid/92236
CVE ID: CVE-2016-3851 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LG Electronics bootloader Android before 2016-08-05 on Nexus 5X devices allows attackers to gain privileges by leveraging access to a privileged process, aka internal bug 29189941. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92251