Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3852 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek Wi-Fi driver in Android before 2016-08-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29141147 and MediaTek internal bug ALPS02751738. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92253
CVE ID: CVE-2016-3853 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92255
CVE ID: CVE-2016-3854 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T00:10:31.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR897326. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92256 - https://source.codeaurora.org/quic/la/kernel/msm/
ty/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92256 - https://source.codeaurora.org/quic/la/kernel/msm/commit/?h=LA.AF.1.2.1_rb1.5&id=cc96def76dfd18fba88575065b29f2ae9191fafa
CVE ID: CVE-2016-3855 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T00:10:31.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/thermal/supply_lm_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR990824. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92256 - https://source.codeaurora.org/quic/la/kernel
ecurity/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92256 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ab3f46119ca10de87a11fe966b0723c48f27acd4
CVE ID: CVE-2016-3856 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T00:10:31.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR959631. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92256 - https://source.codeaurora.org/quic/la/platform/system/netd/commit/?h=LA.BF64.1.2.1&id=cc2853e6cec8ca2cf92430ad9a83358b131fc417 - http
e.codeaurora.org/quic/la/platform/system/netd/commit/?h=LA.BF64.1.2.1&id=cc2853e6cec8ca2cf92430ad9a83358b131fc417 - https://source.codeaurora.org/quic/la/platform/system/netd/commit/?h=LA.BR.1&id=568ef402f6d5a7a50c126aafc78c4edf59abba1c
CVE ID: CVE-2016-3857 State: PUBLISHED Published: 2016-08-05T20:00:00 Last Updated: 2024-08-06T00:10:31.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html
CVE ID: CVE-2016-3858 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug CR1022641. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92873 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=0c148b9a9028c566eac680f19e5d664b483cdee3 - http://sour
https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=0c148b9a9028c566eac680f19e5d664b483cdee3 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3859 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28815326 and Qualcomm internal bug CR1034641. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92877
CVE ID: CVE-2016-3860 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T00:10:31.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29323142 and Qualcomm internal bug CR 1038127. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/sound/soc/msm/qdsp6v2/?id=528976f54be246ec93a71ac53aa4faf3e3791c48 - http://source.android.com/security/bulleti
8/commit/sound/soc/msm/qdsp6v2/?id=528976f54be246ec93a71ac53aa4faf3e3791c48 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93320
CVE ID: CVE-2016-3861 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/native/+/1f4b49e64adf4623eefda503bc
rogram Container: References: - https://android.googlesource.com/platform/frameworks/native/+/1f4b49e64adf4623eefda503bca61e253597b9bf - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/frameworks/av/+/3944c65637dfed14a5a895685edfa4bacaf9f76e - https://android.googlesource.com/platform/system/core/+/ecf5fd58a8f50362ce9e8d4245a33d56f29f142b - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92811 - https://android.googlesource.com/platform/frameworks/base/+/866dc26ad4a98cc835d075b627326e7d7e52ffa1 - https://www.exploit-db.com/exploits/40354/
CVE ID: CVE-2016-3862 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 29270469. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/pl
ntainer: References: - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/frameworks/base/+/e739d9ca5469ed30129d0fa228e3d0f2878671ac - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3863 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the AVCC reassembly implementation in Utils.cpp in libstagefright in MediaMuxer in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow remote attackers to execute arbitrary code via a crafted media file, aka internal bug 29161888. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92817 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googles
/www.securityfocus.com/bid/92817 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/frameworks/av/+/119a012b2a9a186655da4bef3ed4ed8dd9b94c26 - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3864 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28823714 and Qualcomm internal bug CR913117. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92874
CVE ID: CVE-2016-3865 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28799389. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92871
CVE ID: CVE-2016-3866 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28868303 and Qualcomm internal bug CR1032820. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92879
CVE ID: CVE-2016-3867 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92881
CVE ID: CVE-2016-3868 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28967028 and Qualcomm internal bug CR1032875. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92883 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3869 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29009982 and Broadcom internal bug RB#96070. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92885
CVE ID: CVE-2016-3870 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not prevent input-port changes, which allows attackers to gain privileges via a crafted application, aka internal bug 29421804. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/1e9801783770917728b7edbdeff3d0ec09c621ac - http://source.android.com/security/bulletin/2016-09
/platform/frameworks/av/+/1e9801783770917728b7edbdeff3d0ec09c621ac - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3871 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow attackers to gain privileges via a crafted application, aka internal bug 29422022. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/3c4edac2a5b00dec6c8579a0ee658cfb3bb16d94 - http://source.android.com/security/bulletin/2016-09-01.html - http://ww
/av/+/3c4edac2a5b00dec6c8579a0ee658cfb3bb16d94 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/frameworks/av/+/c17ad2f0c7e00fd1bbf01d0dfed41f72d78267ad - https://android.googlesource.com/platform/frameworks/av/+/c2639afac631f5c1ffddf70ee8a6fe943d0bedf9
CVE ID: CVE-2016-3872 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to gain privileges via a crafted application, aka internal bug 29421675. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/630ed150f7201ddadb00b8b8ce0c55c4cc6e8742 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.g
0ed150f7201ddadb00b8b8ce0c55c4cc6e8742 - http://source.android.com/security/bulletin/2016-09-01.html - https://android.googlesource.com/platform/frameworks/av/+/9f9ba255a0c59544f3555c9c45512c3a2fac5fad - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3873 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 29518457. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE ID: CVE-2016-3874 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array, which allows attackers to gain privileges via a crafted application that sends a WE_UNIT_TEST_CMD command, aka Android internal bug 29944562 and Qualcomm internal bug CR997797. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=50e8f265b3f7926aeb4e49c33f7301ace89faa
codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=50e8f265b3f7926aeb4e49c33f7301ace89faa77 - http://source.android.com/security/bulletin/2016-09-01.html - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=a3974e61c960aadcc147c3c5704a67309171642d - http://www.securityfocus.com/bid/92882 - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3875 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOW_SAFE_BOOT setting, which allows physically proximate attackers to bypass intended access restrictions and boot to safe mode via unspecified vectors, aka internal bug 26251884. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92818 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/fra
ity/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - https://android.googlesource.com/platform/frameworks/base/+/69729fa8b13cadbf3173fe1f389fe4f3b7bd0f9c
CVE ID: CVE-2016-3876 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the SAFE_BOOT_DISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge (adb) tool, aka internal bug 29900345. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/91fc934bb2e5ea59929bb2f574de6db9b5100745 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securit
c934bb2e5ea59929bb2f574de6db9b5100745 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763 - http://www.securityfocus.com/bid/92819
CVE ID: CVE-2016-3877 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3878 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29493002. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92821 - https://android.googlesource.com/platform/external/libavc/+/7109ce3f8f90a28ca9f0ee6e14f6ac5e414c62cf - http://source.android.com/security/bulletin/2016-09-01.html - http://www.sec
/7109ce3f8f90a28ca9f0ee6e14f6ac5e414c62cf - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3879 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service (NULL pointer dereference, and device hang or reboot) via a crafted media file, aka internal bug 29770686. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92821 - https://android.googlesource.com/platform/external/sonivox/+/cadfb7a3c96d4fef06656cf37143e1b3e62cae86 - http://source.android.
//android.googlesource.com/platform/external/sonivox/+/cadfb7a3c96d4fef06656cf37143e1b3e62cae86 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3880 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 25747670. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/68f67ef6cf1f41e77337be3bc4bff91f3a3c6324 - http://www.securityfocus.com
ndroid.googlesource.com/platform/frameworks/av/+/68f67ef6cf1f41e77337be3bc4bff91f3a3c6324 - http://www.securityfocus.com/bid/92821 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763
CVE ID: CVE-2016-3881 State: PUBLISHED Published: 2016-09-11T21:00:00 Last Updated: 2024-08-06T00:10:31.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service (buffer over-read, and device hang or reboot) via a crafted media file, aka internal bug 30013856. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libvpx/+/4974dcbd0289a2530df2ee2a25b5f92775df80da - http://ww
nces: - https://android.googlesource.com/platform/external/libvpx/+/4974dcbd0289a2530df2ee2a25b5f92775df80da - http://www.securityfocus.com/bid/92821 - http://source.android.com/security/bulletin/2016-09-01.html - http://www.securitytracker.com/id/1036763