Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6680 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes an iw_set_priv ioctl call, aka Android internal bug 29982678 and Qualcomm internal bug CR 1048052. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93309 - https://source.codeaurora.org/quic/la/platform/vendor/qc
etin/2016-10-01.html - http://www.securityfocus.com/bid/93309 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=2f2fa073b95d4700de88c0f7558b4a18c13ac552
CVE ID: CVE-2016-6681 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 30152182 and Qualcomm internal bug CR 1049521. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/
p://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395 - http://www.securityfocus.com/bid/93309
CVE ID: CVE-2016-6682 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 30152501 and Qualcomm internal bug CR 1049615. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/
CVE ID: CVE-2016-6683 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30143283. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93326
CVE ID: CVE-2016-6684 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93326
CVE ID: CVE-2016-6685 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30402628. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93326
CVE ID: CVE-2016-6686 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30163101. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93324
CVE ID: CVE-2016-6687 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30162222. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93324
CVE ID: CVE-2016-6688 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30593080. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93324
CVE ID: CVE-2016-6689 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30768347. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93323 - http://source.android.com/security/bulletin/2016-10-01.html - https://www.exploit-db.com/exploits/40515/
CVE ID: CVE-2016-6690 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a denial of service (reboot) via a crafted application, aka internal bug 28838221. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93301
CVE ID: CVE-2016-6691 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/
yfocus.com/bid/93330 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la//platform/frameworks/opt/net/wifi/commit/?id=343f123c396b2a97fc7cce396cd5d99365cb9131
CVE ID: CVE-2016-6692 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via unknown vectors, aka Qualcomm internal bug CR 1004933. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=0f0e7047d39f9fb3a1a7f389918ff79cdb4a50b3 - http://source.android.com/security/bulletin/2016-10
ernel/msm-3.18/commit/?id=0f0e7047d39f9fb3a1a7f389918ff79cdb4a50b3 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6693 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=ac328eb631fa74a63d5d2583e6bfeeb5a7a2df65
CVE ID: CVE-2016-6694 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka Qualcomm internal bug CR 1033525. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=961e38553aae8ba9b1af77c7a49acfbb7b0b6f62 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6695 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=c319c2b0926d1ea5edb4d0778d88bd3ce37c4b95 - http://source.android.com/security/bulletin/2016-10-
rnel/msm-3.18/commit/?id=c319c2b0926d1ea5edb4d0778d88bd3ce37c4b95 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6696 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:36:29.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93330 - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=c3c9341bfdf93606983f893a086cb33a487306e5 - http://source.android.com/security/bulletin
uic/la/kernel/msm-3.18/commit/?id=c3c9341bfdf93606983f893a086cb33a487306e5 - http://source.android.com/security/bulletin/2016-10-01.html
CVE ID: CVE-2016-6698 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.594Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30741851. References: Qualcomm QC-CR#1058826. Additional Analyst Notes: - CVE Program Container: References: - https://source
851. References: Qualcomm QC-CR#1058826. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94139
CVE ID: CVE-2016-6699 State: PUBLISHED Published: 2016-12-13T19:00:00 Last Updated: 2024-08-06T01:36:29.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Android ID: A-31373622. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/3b1c9f692c4d4b7a683c2b358fc89e83
gram Container: References: - https://android.googlesource.com/platform/frameworks/av/+/3b1c9f692c4d4b7a683c2b358fc89e831a641b88 - http://www.securityfocus.com/bid/94157 - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-6700 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.425Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in libzipfile in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30916186. Additional Analyst Notes: - CVE Program Container: References: - https:
em to repair the device. Android ID: A-30916186. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94159
CVE ID: CVE-2016-6701 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.575Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of the gallery process. Android ID: A-30190637. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94162 - https://source.android.com/security/bulletin/2016
gram Container: References: - http://www.securityfocus.com/bid/94162 - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-6702 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.563Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-0
Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94160
CVE ID: CVE-2016-6703 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.368Z Vendors: Google Inc. Products: Android Problem Types: Remote code execution Description: A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Android runtime. Android ID: A-30765246. Additional Analyst Notes: - CVE Program Container: References:
on that uses the Android runtime. Android ID: A-30765246. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94161 - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-6704 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.469Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-30229821. Additional Analyst Notes: -
ies, which are not normally accessible to a third-party application. Android ID: A-30229821. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-12-01.html - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94134
CVE ID: CVE-2016-6705 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.476Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in Mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-30907212. Additional Analyst Notes: - CVE Program Conta
normally accessible to a third-party application. Android ID: A-30907212. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94134
CVE ID: CVE-2016-6706 State: PUBLISHED Published: 2016-12-13T19:00:00 Last Updated: 2024-08-06T01:36:29.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31385713. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html
ional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94134 - https://android.googlesource.com/platform/frameworks/av/+/1d4feebdb85db46e138530f360d9ff2490e14353
CVE ID: CVE-2016-6707 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.542Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31350622. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromi
pplication. Android ID: A-31350622. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=928 - https://googleprojectzero.blogspot.com/2016/12/bitunmap-attacking-android-ashmem.html - http://www.securityfocus.com/bid/94164 - https://www.exploit-db.com/exploits/40874/ - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-6708 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.475Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or security setting modifications. Android ID: A-30693465. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94166 - https://source.android.com/security/bulleti
VE Program Container: References: - http://www.securityfocus.com/bid/94166 - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-6709 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.567Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in Conscrypt and BoringSSL in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a man-in-the-middle attacker to gain access to sensitive information if a non-standard cipher suite is used by an application. This issue is rated as High because it could be used to access data without permission. Android ID: A-31081987. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94169 - https://source.an
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94169 - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-6710 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T01:36:29.492Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in the download manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Android ID: A-30537115. Additional Analyst Notes: - CVE Program Container: Ref
the application does not have access to. Android ID: A-30537115. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94170
CVE ID: CVE-2016-6711 State: PUBLISHED Published: 2016-12-13T19:00:00 Last Updated: 2024-08-06T01:36:29.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-30593765. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94137 - https://source.android.com/security/bulletin/2016-11-01.html - https:/