Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0813 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c
E Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0815 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26365349. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/5403587a74aee2fb57076528c3927851531c8afb - http://www.securityfocus.com/bid/8
glesource.com/platform%2Fframeworks%2Fav/+/5403587a74aee2fb57076528c3927851531c8afb - http://www.securityfocus.com/bid/84235 - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0816 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84235 - http://source.android.com/security/bulletin/2016-03-01.html - https://android.googlesource.com/platform/external/libavc/+/4a524d3a8ae9aa20c36430008e6bd42
y/bulletin/2016-03-01.html - https://android.googlesource.com/platform/external/libavc/+/4a524d3a8ae9aa20c36430008e6bd429443f8f1d
CVE ID: CVE-2016-0818 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:04.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/conscrypt/+/4
l Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/conscrypt/+/4c9f9c2201116acf790fca25af43995d29980ee0 - http://www.securityfocus.com/bid/84245 - http://source.android.com/security/bulletin/2016-03-01.html - https://android.googlesource.com/platform/external/conscrypt/+/c4ab1b959280413fb11bf4fd7f6b4c2ba38bd779
CVE ID: CVE-2016-0819 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 25364034. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-03-01.html - http://www.securityfocus.com/bid/84250
CVE ID: CVE-2016-0820 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84257 - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0821 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://www.
636. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://www.ubuntu.com/usn/USN-2967-1 - http://www.ubuntu.com/usn/USN-2970-1 - https://github.com/torvalds/linux/commit/8a5e5e02fc83aaf67053ab53b359af08c6c49aaf - http://www.openwall.com/lists/oss-security/2015/05/02/6 - http://www.ubuntu.com/usn/USN-2969-1 - http://www.ubuntu.com/usn/USN-2967-2 - http://www.ubuntu.com/usn/USN-2968-1 - http://source.android.com/security/bulletin/2016-03-01.html - http://www.ubuntu.com/usn/USN-2971-3 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://www.ubuntu.com/usn/USN-2968-2 - http://git.kernel.org/cgit/l
16/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://www.ubuntu.com/usn/USN-2968-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8a5e5e02fc83aaf67053ab53b359af08c6c49aaf - http://www.securityfocus.com/bid/84260
CVE ID: CVE-2016-0822 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-03-01.html - http://www.securityfocus.com/bid/84263
CVE ID: CVE-2016-0823 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84265 - http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 - http://source.a
loiting-dram-rowhammer-bug-to-gain.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 - http://source.android.com/security/bulletin/2016-03-01.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce - https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce
CVE ID: CVE-2016-0824 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-03-01.html - http://www.securityfocus.com/bid/84262 - https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb
1.html - http://www.securityfocus.com/bid/84262 - https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3
CVE ID: CVE-2016-0825 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84269 - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0826 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26265403. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/899823966e78552bb6dfd7772403a4
rogram Container: References: - https://android.googlesource.com/platform/frameworks/av/+/899823966e78552bb6dfd7772403a4f91471d2b0 - http://www.securityfocus.com/bid/84268 - https://android.googlesource.com/platform/frameworks/av/+/c9ab2b0bb05a7e19fb057e79b36e232809d70122 - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0827 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, related to EffectBundle.cpp and EffectReverb.cpp, aka internal bug 26347509. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84268 - https://android.googlesource.com/platform/frameworks/av/+/9e29523b9537983b4c4b205ff
://www.securityfocus.com/bid/84268 - https://android.googlesource.com/platform/frameworks/av/+/9e29523b9537983b4c4b205ff868d0b3bca0383b - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0828 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an ATTACH_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338113. Additional Analyst Notes: - CVE Program Container: References: - https:/
tureOrSystem access, aka internal bug 26338113. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/native/+/dded8fdbb700d6cc498debc69a780915bc34d755 - http://www.securityfocus.com/bid/84261 - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0829 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initialize a certain output data structure, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering a QUEUE_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338109. Additional Analyst Notes: - CVE Program Contain
aining Signature or SignatureOrSystem access, aka internal bug 26338109. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/native/+/d06421fd37fbb7fd07002e6738fac3a223cb1a62 - http://www.securityfocus.com/bid/84261 - http://source.android.com/security/bulletin/2016-03-01.html
CVE ID: CVE-2016-0830 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries, and consequently exceeding the maximum size of a configuration file, aka internal bug 26071376. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5 - http://source.android.com/security/bulletin/2016-03-01.htm
atform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5 - http://source.android.com/security/bulletin/2016-03-01.html - http://www.securityfocus.com/bid/84270
CVE ID: CVE-2016-0831 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25778215. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-03-01.html - https://android.googlesource.com/platform/frameworks/opt/telephony/+/79eecef63f3ea99688
urity/bulletin/2016-03-01.html - https://android.googlesource.com/platform/frameworks/opt/telephony/+/79eecef63f3ea99688333c19e22813f54d4a31b1 - http://www.securityfocus.com/bid/84266
CVE ID: CVE-2016-0832 State: PUBLISHED Published: 2016-03-12T21:00:00 Last Updated: 2024-08-05T22:30:05.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25955042. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-03-01.html - http://www.securityfocus.com/bid/84264
CVE ID: CVE-2016-0833 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-05T22:30:05.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android allows users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/jose-maria-ariel-martinez-juarez-7910a189/ - http://www.securityfocus.com/bid/98009
CVE ID: CVE-2016-0834 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26220548. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4561 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0835 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libmpeg2/+/ba604d336b40fd4bde1622f64d67135bdbd61301 - https://android.googlesource.com/platform/external/libmpeg2/+/58a6822d7140137ce957c6d2fc20bae1374
22f64d67135bdbd61301 - https://android.googlesource.com/platform/external/libmpeg2/+/58a6822d7140137ce957c6d2fc20bae1374186c1 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0836 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libmpeg2/+/8b4ed5a23175b7ffa56eea4678db7287f825e985 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0837 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via a crafted media file, aka internal bug 27208621. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/7a282fb64fef25349e9d341f102d9cea3bf75baf - http://source.android.com/security/bulletin/
rce.com/platform/frameworks/av/+/7a282fb64fef25349e9d341f102d9cea3bf75baf - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0838 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c, aka internal bug 26366256. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/sonivox/
tional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/sonivox/+/24d7c408c52143bce7b49de82f3913fd8d1219cf - https://android.googlesource.com/platform/external/sonivox/+/3ac044334c3ff6a61cb4238ff3ddaf17c7efcf49 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0839 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/hardware/qcom/audio/+/ebbb82365172337c6c250c6cac4e326970a9e351 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0840 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26399350. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libavc/+/c57fc3703ae2e0d41b1f6580c50015937f2d23c1 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0841 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/3097f364237fb552871f7639d37a7afa4563e252 - http://source.androi
ttps://android.googlesource.com/platform/frameworks/av/+/3097f364237fb552871f7639d37a7afa4563e252 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0842 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25818142. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libavc/+/943323f1d9d3dd5c2634deb26cbe72343ca6b3db - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0843 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application, aka internal bug 25801197. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0844 State: PUBLISHED Published: 2016-04-18T00:00:00 Last Updated: 2024-08-05T22:30:05.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which allows attackers to gain privileges via a crafted application, aka internal bug 26324307. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/sepolicy/+/57531cacb40682be4b1189c721fd1e7f25bf3786 - http://source.android.com/security/bulletin/2016-04-02.html
CVE ID: CVE-2016-0845 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.