Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
penwall.com/lists/oss-security/2016/05/19/2 - http://projects.theforeman.org/issues/14931 - http://theforeman.org/security.html#2016-3728 - https://access.redhat.com/errata/RHBA-2016:1501
CVE ID: CVE-2016-3729 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T00:03:34.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/17/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1335933 - http://www.securitytracker.com/id/1035902
CVE ID: CVE-2016-3730 State: REJECTED Published: 2022-07-28T16:43:34 Last Updated: 2022-07-28T16:43:34 Description: No description available.
CVE ID: CVE-2016-3731 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T00:03:34.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/17/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1335933 - http://www.securitytracker.com/id/1035902
CVE ID: CVE-2016-3732 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T00:03:34.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/17/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1335933 - http://www.securitytracker.com/id/1035902
CVE ID: CVE-2016-3733 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T00:03:34.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/17/4 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51369 - https://bugzilla.redhat.com/show_bug.cgi?id=1335933 - http://www.securitytracker.com/id/1035902
CVE ID: CVE-2016-3734 State: PUBLISHED Published: 2017-04-20T21:00:00 Last Updated: 2024-08-06T00:03:34.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/17/4 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53755 - https://bugzilla.redhat.com/show_bug.cgi?id=1335933 - http:/
org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53755 - https://bugzilla.redhat.com/show_bug.cgi?id=1335933 - http://www.securitytracker.com/id/1035902 - http://www.securityfocus.com/bid/91281
CVE ID: CVE-2016-3735 State: PUBLISHED Published: 2022-01-28T00:00:00 Last Updated: 2024-08-06T00:03:34.506Z Vendors: n/a Products: Piwigo Problem Types: CWE-335 Description: Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand in order to generate password reset tokens. mt_rand output can be predicted after recovering the seed used to generate it. This low an unauthenticated attacker to take over an account providing they know an administrators email address in order to be able to request password reset. Additional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/release-2.8.1%2C - https://github.com/Pi
itional Analyst Notes: - CVE Program Container: References: - http://piwigo.org/release-2.8.1%2C - https://github.com/Piwigo/Piwigo/issues/470%2C - https://github.com/Piwigo/Piwigo/commit/f51ee90c66527fd7ff634f3e8d414cb670da068d
CVE ID: CVE-2016-3736 State: REJECTED Published: 2021-12-28T18:41:14 Last Updated: 2021-12-28T18:41:14 Description: No description available.
CVE ID: CVE-2016-3737 State: PUBLISHED Published: 2016-08-02T14:00:00 Last Updated: 2024-08-06T00:03:34.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2016-22 - https://bugzilla.redhat.com/show_bug.cgi?id=1333618 - http://rhn.redhat.com/errata/RHSA-2016-1519.html - http://www.securitytracker.com/id/1036507
CVE ID: CVE-2016-3738 State: PUBLISHED Published: 2016-06-08T17:00:00 Last Updated: 2024-08-06T00:03:34.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1094
CVE ID: CVE-2016-3739 State: PUBLISHED Published: 2016-05-20T00:00:00 Last Updated: 2024-08-06T00:03:34.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.securitytracker.com/id/1035907 - https://curl.
portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.securitytracker.com/id/1035907 - https://curl.haxx.se/docs/adv_20160518.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.495349 - http://www.securityfocus.com/bid/90726 - https://curl.haxx.se/CVE-2016-3739.patch - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://security.gentoo.org/glsa/201701-47 - https://curl.haxx.se/changes.html#7_49_0 - http://www.openwall.com/lists/oss-security/2024/03/27/4
CVE ID: CVE-2016-3740 State: PUBLISHED Published: 2017-04-04T18:00:00 Last Updated: 2024-08-06T00:03:34.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - https://0patch.blogspot.com/2016/07/0patching-foxit-readers-heap-buffer.html
CVE ID: CVE-2016-3741 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/external/libavc/+/e629194c62a9a129ce378e08cb1059a8a53f1795 - https://android.googlesource.com/platf
esource.com/platform/external/libavc/+/e629194c62a9a129ce378e08cb1059a8a53f1795 - https://android.googlesource.com/platform/external/libavc/+/cc676ebd95247646e67907ccab150fb77a847335
CVE ID: CVE-2016-3742 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libavc/+/a583270e1c96d307469c83dc42bd3c5f1b9ef63f - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3743 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libavc/+/ecf6c7ce6d5a22d52160698aab44fc234c63291a - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3744 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to gain privileges via a crafted pairing operation, aka internal bug 27930580. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/system/bt/+/514139f4b40cbb035bb92f3e24d5a389d75db9e6 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3745 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28173666. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/hardware/qcom/audio/+/073a80800f341325932c66818ce4302b312909a4 - http://source.android.com/securi
glesource.com/platform/hardware/qcom/audio/+/073a80800f341325932c66818ce4302b312909a4 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3746 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27890802. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/5b82f4f9
android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/hardware/qcom/media/+/5b82f4f90c3d531313714df4b936f92fb0ff15cf
CVE ID: CVE-2016-3747 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27903498. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/hardware/qcom/media/+/4ed06d14080d8667d5be14eed200e378cba78345 - http://source.android.com/s
d.googlesource.com/platform/hardware/qcom/media/+/4ed06d14080d8667d5be14eed200e378cba78345 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3748 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/sepolicy/+/556bb0f55324e8839d7b735a0de9bc31028e839e - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3749 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/frameworks/base/+/e83f0f6a5a6f35323f5367f99c8e287c440f33f5
CVE ID: CVE-2016-3750 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup system call, which allows attackers to bypass an isolation protection mechanism via a crafted application, aka internal bug 28395952. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/native/+/54cb02ad733fb71b1bdf78590428817fb780aff8 - http://source.android.com/security
glesource.com/platform/frameworks/native/+/54cb02ad733fb71b1bdf78590428817fb780aff8 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3751 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca - http://www.openwall.com/lists/oss-security/2016/07/
latform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca - http://www.openwall.com/lists/oss-security/2016/07/09/4 - http://source.android.com/security/bulletin/2016-07-01.html - https://security.netapp.com/advisory/ntap-20240719-0004/
CVE ID: CVE-2016-3752 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attackers to gain privileges via a crafted application, aka internal bug 28384423. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/ddbf2db5b946be8fdc45c7b0327bf560b2a06988 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3753 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3754 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28615448. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/e7142a0703bc93f75e213e96ebc19000022afed9 - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googleso
3bc93f75e213e96ebc19000022afed9 - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/frameworks/av/+/6fdee2a83432b3b150d6a34f231c4e2f7353c01e
CVE ID: CVE-2016-3755 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28470138. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/libavc/+/d4841f1161bdb5e13cb19e81af42437a634dd6ef - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3756 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of partitions, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28556125. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/tremolo/+/659030a2e80c38fb8da0a4eb68695349eec6778b - http://source.android.com/security/bulletin/2016-07-01.h
m/external/tremolo/+/659030a2e80c38fb8da0a4eb68695349eec6778b - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3757 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of a memory-mapped file, aka internal bug 28175237. NOTE: print_maps is not related to the Vic Abell lsof product. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/system/core/+/ae18eb014609948a40e22192b87b10efc680daa7 - http:/
References: - https://android.googlesource.com/platform/system/core/+/ae18eb014609948a40e22192b87b10efc680daa7 - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3758 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides a long filename, aka internal bug 27840771. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/dalvik/+/338aeaf28e9981c15d0673b18487dba61eb5447c - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3759 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application that leverages priv-app access to insert a backup transport, aka internal bug 28406080. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/frameworks/base/+/9b8c6d2df35455ce9e67907edded1e4a2ecb9e28
CVE ID: CVE-2016-3760 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user, aka internal bug 27410683. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/system/bt/+/37c88107679d36c419572732b4af6e18bb2f7dce - https://android.googlesource.com/platform/hardware/libhardware/+/8b3d5a64c3c8d010ad4517f652731f09107ae9c5 - http://source.android.com
id.googlesource.com/platform/hardware/libhardware/+/8b3d5a64c3c8d010ad4517f652731f09107ae9c5 - http://source.android.com/security/bulletin/2016-07-01.html - https://android.googlesource.com/platform/packages/apps/Bluetooth/+/122feb9a0b04290f55183ff2f0384c6c53756bd8
CVE ID: CVE-2016-3761 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Nfc/+/9ea802b5456a36f1115549b645b65c791eff3c2c - http://source.android.com/security/bulletin/2016-07-01.html
CVE ID: CVE-2016-3762 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-06T00:03:34.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application that uses (1) the AF_MSM_IPC socket class or (2) another socket class that is unrecognized by SELinux, aka internal bug 28612709. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/sepolicy/+/abf0663ed884af7bc880a05e9529e6671eb58f39 - http://source.android.com/security/bulletin/2016-07-01.html