Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Bh=259b664f950c2ba66fbf4b0fe5281327904ead21 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://www.ubuntu.com/usn/USN-2914-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - http://openssl.org/news/secadv/20160301.txt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - http://www.secur
.txt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - http://www.securityfocus.com/bid/83705 - http://www.debian.org/security/2016/dsa-3500 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - https://www.openssl.org/news/secadv/20160301.txt - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - https://security.gentoo.org/glsa/201603-15 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/10
3-15 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0799 State: PUBLISHED Published: 2016-03-03T00:00:00 Last Updated: 2024-08-05T22:30:05.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securityfocus.com/bid/83755 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://rhn.redhat.com/errata/RHSA-2016-2073.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://marc.info/?l=bugtraq&m=146108058503441&w=2 -
.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://marc.info/?l=bugtraq&m=146108058503441&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://l
ies/FreeBSD-SA-16:12.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://marc.info/?l=bugtraq&m=145983526810210&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://www.ubuntu.com/usn/USN-2914-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docI
05158380 - http://www.ubuntu.com/usn/USN-2914-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html - http://openssl.org/news/secadv/20160301.txt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - https://h20566.www
xt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441 - http://www.debian.org/security/2016/dsa-3500 - http://rhn.redhat.com/errata/RHSA-2016-0996.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId
://rhn.redhat.com/errata/RHSA-2016-0996.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://www.openssl.org/news/secadv/20160301.txt - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201603-15 - http://www.oracle.com/technetwork
n.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201603-15 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800 - http://rhn.redhat.com/errata/RHSA-2016-0722.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.or
03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0800 State: PUBLISHED Published: 2016-03-01T00:00:00 Last Updated: 2024-08-05T22:30:05.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10154 - http://www.oracle.com/technetwork/topi
er: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10154 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://access.redhat.com/security/vulnerabilities/drown - http://marc.info/?l=bugtraq&m=146133665209436&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://marc.info/?l=bugtraq&m=146108058503441&w=2 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us - https://h2
41&w=2 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.or
016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://security.netapp.com/advisory/ntap-20160301-0001/ - http://marc.info/?l=bugtraq&m=145983526810210&w=2 - https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pulsesecure.net/articl
5096953 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - https://www.kb.cert.org/vuls/id/583776 - https://drownattack.com - https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - http://lists
splay?docId=emr_na-c05086877 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554 - http://www.securityfocus.com/bid/83733 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://rhn.redhat.com/errata/RHSA-2016-1519.html - http://lists.opensuse.org/opensuse-security-annou
hpesbhf03741en_us - http://rhn.redhat.com/errata/RHSA-2016-1519.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://www.openssl.org/news/secadv/20160301.txt - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf - https://security.gentoo.org/glsa/201603-15 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://h20566.www2.hpe.com/po
603-15 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681 - http://support.citrix.com/article/CTX208403 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/open
00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf - https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0801 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:04.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - https://www.exploit-db.com
Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - https://www.exploit-db.com/exploits/39801/ - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0802 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25306181. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.securitytracker
Mar/msg00004.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.securitytracker.com/id/1035353 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0803 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/50270d98e26fa18b20ca88216c3526667b724ba7 -
References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/50270d98e26fa18b20ca88216c3526667b724ba7 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0804 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/2248
Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/224858e719d045c8554856b12c4ab73d2375cf33 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0805 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0806 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25344453. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0807 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fsystem%2Fcore/+/d917514bd6b270df431ea4e781a865764d406120 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0808 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b - http://source.android.com/security/bulletin/
om/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0809 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers to gain privileges by leveraging access to the local physical environment during execution of a crafted application, aka internal bug 25753768. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/hardware/broadcom/wlan/+/2c5a4fac8bc8198f6a2635ede776f8de40a0c3e1 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0810 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25781119. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/19c47afbc402542720ddd280e1bbde3b2277b586 - http://source.android.com/security/bullet
ce.com/platform%2Fframeworks%2Fav/+/19c47afbc402542720ddd280e1bbde3b2277b586 - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0811 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d
otes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d5758f9a70b77f2aca840ba62c3b - http://source.android.com/security/bulletin/2016-02-01.html
CVE ID: CVE-2016-0812 State: PUBLISHED Published: 2016-02-07T01:00:00 Last Updated: 2024-08-05T22:30:05.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2
dditional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541 - http://source.android.com/security/bulletin/2016-02-01.html