Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3882 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (reboot) via an access point that provides a crafted (1) Venue Group or (2) Venue Type value, aka internal bug 29464811. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93295 - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/opt/net/wi
//source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/35a86eef3c0eef760f7e61c52a343327ba601630
CVE ID: CVE-2016-3883 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: internal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not properly construct warnings about premium SMS messages, which allows attackers to spoof the premium-payment confirmation dialog via a crafted application, aka internal bug 28557603. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - h
eferences: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/frameworks/opt/telephony/+/b2c89e6f8962dc7aff88cb38aa3ee67d751edda9 - http://www.securityfocus.com/bid/92861
CVE ID: CVE-2016-3884 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 lacks uid checks, which allows attackers to bypass intended restrictions on method calls via a crafted application, aka internal bug 29421441. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92875 - https://android.googlesource.c
ml - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92875 - https://android.googlesource.com/platform/frameworks/base/+/61e9103b5725965568e46657f4781dd8f2e5b623
CVE ID: CVE-2016-3885 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles the interaction between PTRACE_ATTACH operations and thread exits, which allows attackers to gain privileges via a crafted application, aka internal bug 29555636. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securitytracker.com/i
ulletin/2016-09-01.html - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92876 - https://android.googlesource.com/platform/system/core/+/d7603583f90c2bc6074a4ee2886bd28082d7c65b
CVE ID: CVE-2016-3886 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prevent tuner changes on the lockscreen, which allows physically proximate attackers to gain privileges by modifying a setting, aka internal bug 30107438. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/6ca6cd5a50311d58a1b7bf8fbef3f9aa29eadcd5 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securityfocus.com/bi
a1b7bf8fbef3f9aa29eadcd5 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securityfocus.com/bid/92860 - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3887 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: providers/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly enforce the DISALLOW_CONFIG_VPN setting, which allows attackers to bypass an intended always-on VPN state via a crafted application, aka internal bug 29899712. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/335702d106797bce8a88044783fa1fc1d5f751d0 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http:/
751d0 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92872
CVE ID: CVE-2016-3888 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: internal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism, and send premium SMS messages during the Setup Wizard provisioning stage, via unspecified vectors, aka internal bug 29420123. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92857 - http://source.android.com/security/bulletin/2
Program Container: References: - http://www.securityfocus.com/bid/92857 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/frameworks/opt/telephony/+/b8d1aee993dcc565e6576b2f2439a8f5a507cff6
CVE ID: CVE-2016-3889 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing (1) an external tile from a system application, (2) the help feature, or (3) the Settings application during a pre-setup stage, aka internal bug 29194585. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92854 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
com/bid/92854 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/frameworks/base/+/e206f02d46ae5e38c74d138b51f6e1637e261abe - https://android.googlesource.com/platform/packages/apps/Settings/+/bd5d5176c74021e8cf4970f93f273ba3023c3d72
CVE ID: CVE-2016-3890 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 mishandles socket close operations, which allows attackers to gain privileges via a crafted application, aka internal bug 28347842. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92851 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/system/core/+/268068f2567
urce.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/system/core/+/268068f25673242d1d5130d96202d3288c91b700 - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/system/core/+/014b01706cc64dc9c2ad94a96f62e07c058d0b5d
CVE ID: CVE-2016-3892 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28760543 and Qualcomm internal bug CR1024197. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92878 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3893 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29512527 and Qualcomm internal bug CR856400. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityf
/source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92884 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a7a6ddc91cce7ad5ad55c9709b24bfc80f5ac873
CVE ID: CVE-2016-3894 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29618014 and Qualcomm internal bug CR1042033. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92880
CVE ID: CVE-2016-3895 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/frameworks/native/+/363247929c35104b3e5ee9e637e9dcf579080aee
CVE ID: CVE-2016-3896 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attackers to obtain sensitive EmailAccountCacheProvider information via a crafted application, aka internal bug 29767043. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Email/+/cb2dfe43f25cb0c32cc73aa4569c0a5186a4ef43 - http://www.securityfocus.com/bid/92848 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytrac
/www.securityfocus.com/bid/92848 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3897 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 includes a password in the return value of a toString method call, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25624963. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.s
- http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92842 - https://android.googlesource.com/platform/frameworks/base/+/81be4e3aac55305cbb5c9d523cf5c96c66604b39 - https://android.googlesource.com/platform/frameworks/base/+/55271d454881b67ff38485fdd97598c542cc2d55
CVE ID: CVE-2016-3898 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service (loss of locked-screen 911 TTY functionality) via a crafted application that modifies the TTY mode by broadcasting an intent, aka internal bug 29832693. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/packages/services/Telephony/+/d1d248d10cf03498efb7041f
letin/2016-09-01.html - https://android.googlesource.com/platform/packages/services/Telephony/+/d1d248d10cf03498efb7041f1a8c9c467482a19d - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3899 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: OMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not validate a certain pointer, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29421811. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92821 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesourc
.securityfocus.com/bid/92821 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/frameworks/av/+/97837bb6cbac21ea679843a0037779d3834bed64 - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3900 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not properly restrict service registration, which allows attackers to gain privileges via a crafted application, aka internal bug 29431260. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/native/+/047eec456943dc082e33220d28abb7df4e089f69 - http://source.android.com/security/bulletin/2016-10-01.html -
eworks/native/+/047eec456943dc082e33220d28abb7df4e089f69 - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/native/+/d3c6ce463ac91ecbeb2128beb475d31d3ca6ef42 - http://www.securityfocus.com/bid/93291
CVE ID: CVE-2016-3901 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999161 and Qualcomm internal bug CR 1046434. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93327 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kerne
om/bid/93327 - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5f69ccf3b011c1d14a1b1b00dbaacf74307c9132
CVE ID: CVE-2016-3902 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93309 - https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2fca425d781572393fbe51ab
securityfocus.com/bid/93309 - https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2fca425d781572393fbe51abe2e27a932d24a768
CVE ID: CVE-2016-3903 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29513227 and Qualcomm internal bug CR 1040857. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93322 - https://source.codeaurora.org/quic/la/kernel/
curity/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93322 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b8874573428e8ce024f57c6242d662fcca5e5d55
CVE ID: CVE-2016-3904 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T00:10:31.865Z Vendors: Google Inc. Products: Android Problem Types: Elevation of privilege Description: An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30311977. References: Qualcomm QC-CR#1050455. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94210 - https://source.android.com/security/bulletin/20
rogram Container: References: - http://www.securityfocus.com/bid/94210 - https://source.android.com/security/bulletin/2016-11-01.html
CVE ID: CVE-2016-3905 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application that sends a SENDACTIONFRAME command, aka Android internal bug 28061823 and Qualcomm internal bug CR 1001449. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=b5112838eb91b71eded4b5ee37338
//source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=b5112838eb91b71eded4b5ee37338535784e0aef - http://www.securityfocus.com/bid/93328
CVE ID: CVE-2016-3906 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T00:10:31.921Z Vendors: n/a Products: Android Kernel-3.10 Problem Types: Information disclosure Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30445973. References: Qualcomm QC-CR#1054344. Additional Analyst Notes: - CVE Program Container: References: - https://so
0445973. References: Qualcomm QC-CR#1054344. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94139
CVE ID: CVE-2016-3907 State: PUBLISHED Published: 2016-11-25T16:00:00 Last Updated: 2024-08-06T00:10:31.864Z Vendors: Google Inc. Products: Android Problem Types: Information disclosure Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30593266. References: Qualcomm QC-CR#1054352. Additional Analyst Notes: - CVE Program Container: References: - https://source
266. References: Qualcomm QC-CR#1054352. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94139
CVE ID: CVE-2016-3908 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and consequently gain privileges, via a crafted application, aka internal bug 30003944. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/96daf7d4893f614714761af2d53dfb93214a32e4 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93290
CVE ID: CVE-2016-3909 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30033990. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93296 - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/av/+/c48ef757cc50906e8726a3bebc3b60716292cdba
in/2016-10-01.html - https://android.googlesource.com/platform/frameworks/av/+/c48ef757cc50906e8726a3bebc3b60716292cdba - https://android.googlesource.com/platform/frameworks/av/+/d4271b792bdad85a80e2b83ab34c4b30b74f53ec
CVE ID: CVE-2016-3910 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93296 - http://source.android.com/security/bulletin/2016-10-01.html - https://android.googlesource.com/platform/frameworks/av/+/035cb12f392860113dce96116a5150e2fde6f0cc