deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9785
Published: 2016-07-11
Description: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b4338420db61f029ca6713a89c41b3a5852b20ce
CVE: CVE-2014-9786
Published: 2016-07-11
Description: Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28557260 and Qualcomm internal bug CR545979.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=2fb303d9c6ca080f253b10ed9384293ca69ad32b
CVE: CVE-2014-9787
Published: 2016-07-11
Description: Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=528400ae4cba715f6c9ff4a2657dafd913f30b8b
CVE: CVE-2014-9788
Published: 2016-07-11
Description: Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=73bfc22aa70cc0b7e[PII_REDACTED]a0a42aa72a4f2
CVE: CVE-2014-9789
Published: 2016-07-11
Description: The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm internal bug CR556425.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=5720ed5c3a786e3ba0a2428ac45da5d7ec996b4e
CVE: CVE-2014-9790
Published: 2016-07-11
Description: drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointers used in read and write operations, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769136 and Qualcomm internal bug CR545716.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=6ed921bda8cbb505e8654dfc1095185b0bccc38e
CVE: CVE-2014-9791
Published: 2016-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-0196.  Reason: This candidate is a reservation duplicate of CVE-2014-0196.  Notes: All CVE users should reference CVE-2014-0196 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-9792
Published: 2016-07-11
Description: arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data type, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769399 and Qualcomm internal bug CR550606.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=a3e3dd9fc0a2699ae053ffd3efb52cdc73ad94cd
CVE: CVE-2014-9793
Published: 2016-07-11
Description: platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=0dcccecc4a6a9a9b3314cb87b2be8b52df1b7a81
CVE: CVE-2014-9794
Published: 2016-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-0973.  Reason: This candidate is a reservation duplicate of CVE-2014-0973.  Notes: All CVE users should reference CVE-2014-0973 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-9795
Published: 2016-07-11
Description: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=ce2a0ea1f14298abc83729f3a095adab43342342
CVE: CVE-2014-9796
Published: 2016-07-11
Description: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in the kernel header, which allows attackers to bypass intended access restrictions via a crafted boot image, aka Android internal bug 28820722 and Qualcomm internal bug CR684756.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=2e21b3a57cac7fb876bcf43244d7cc3dc1f6030d
CVE: CVE-2014-9797
Published: 2016-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-0974.  Reason: This candidate is a reservation duplicate of CVE-2014-0974.  Notes: All CVE users should reference CVE-2014-0974 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-9798
Published: 2016-07-11
Description: platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service (OS outage) via a crafted application, aka Android internal bug 28821448 and Qualcomm internal bug CR681965.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://source.android.com/security/bulletin/2016-07-01.html; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2014-9799
Published: 2016-07-11
Description: The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option to gcc, which might allow attackers to gain privileges via a crafted application that leverages incorrect compiler optimization of an integer-overflow protection mechanism, aka Android internal bug 28821731 and Qualcomm internal bug CR691916.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=c2119f1fba46f3b6e153aa018f15ee46fe6d5b76
CVE: CVE-2014-9800
Published: 2016-07-11
Description: Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189, CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=6390f200d966dc13cf61bb5abbe3110447ca82b5
CVE: CVE-2014-9801
Published: 2016-07-11
Description: Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28822060 and Qualcomm internal bug CR705078.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=cf8f5a105bafda906ccb7f149d1a5b8564ce20c0
CVE: CVE-2014-9802
Published: 2016-07-11
Description: Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=222e0ec9bc755bfeaa74f9a0052b7c709a4ad054
CVE: CVE-2014-9803
Published: 2016-07-11
Description: arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830; http://source.android.com/security/bulletin/2016-07-01.html; https://github.com/torvalds/linux/commit/5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830
CVE: CVE-2015-8888
Published: 2016-07-11
Description: Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR813933.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189, CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=1321f34f1ebcff61ad7e65e507cfd3e9028af19b
CVE: CVE-2015-8889
Published: 2016-07-11
Description: The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android internal bug 28822677 and Qualcomm internal bug CR804067.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fa774e023554427ee14d7a49181e9d4afbec035e
CVE: CVE-2015-8890
Published: 2016-07-11
Description: platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate certain GUID Partition Table (GPT) data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard (MMC), aka Android internal bug 28822878 and Qualcomm internal bug CR823461.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=e22aca36da2bb6f5016f3c885eb8c8ff85c115e4
CVE: CVE-2015-8891
Published: 2016-07-11
Description: Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=4f829bb52d0338c87bc6fbd0414b258f55cc7c62
CVE: CVE-2015-8892
Published: 2016-07-11
Description: platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://www.securityfocus.com/bid/91628; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=fae606b9dd92c021e[PII_REDACTED]264f24f60db23
CVE: CVE-2015-8893
Published: 2016-07-11
Description: app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial of service (OS outage or buffer over-read) via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=800255e8bfcc31a02e89460460e3811f225e7a69; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2067
Published: 2016-07-11
Description: drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSL_MEMFLAGS_GPUREADONLY flag, which allows attackers to gain privileges by leveraging accidental read-write mappings, aka Qualcomm internal bug CR988993.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://source.android.com/security/bulletin/2016-07-01.html; https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=410cfa95f0a1cf58819cbfbd896f9aa45b004ac0; https://www.codeaurora.org/privilege-escalation-vulnerability-graphics-driver-cve-2016-2067
CVE: CVE-2016-2068
Published: 2016-07-11
Description: The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (integer overflow, and buffer overflow or buffer over-read) via a crafted application that performs a (1) AUDIO_EFFECTS_WRITE or (2) AUDIO_EFFECTS_READ operation, aka Qualcomm internal bug CR1006609.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://source.android.com/security/bulletin/2016-07-01.html; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=01ee86da5a0cd788f134e360e2be517ef52b6b00; https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=[PII_REDACTED]c889f761d102202bc80306ae80ab83
CVE: CVE-2016-2501
Published: 2016-07-11
Description: The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 27890772 and Qualcomm internal bug CR1001092.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2502
Published: 2016-07-11
Description: drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a large size in a GSER_IOCTL ioctl call, aka Android internal bug 27657963 and Qualcomm internal bug CR997044.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=0bc45d7712eabe315ce8299a49d16433c3801156; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2503
Published: 2016-07-11
Description: The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal bug CR1006067.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-07-01.html; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2505
Published: 2016-07-11
Description: mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28333006.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/frameworks/av/+/4f236c532039a61f0cf681d2e3c6e022911bbb5c; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2506
Published: 2016-07-11
Description: DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28175045.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/frameworks/av/+/e248db02fbab2ee9162940bc19f087fd7d96cb9d; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2507
Published: 2016-07-11
Description: Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28532266.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-189
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/frameworks/av/+/60547808ca4e9cfac50028c00c58a6ceb2319301; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-2508
Published: 2016-07-11
Description: media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28799341.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/frameworks/av/+/d112f7d0c1dbaf[PII_REDACTED]becb11ca8d3f13a4; https://android.googlesource.com/platform/frameworks/av/+/f81038006b4c59a5a148dcad[PII_REDACTED]33c28f
CVE: CVE-2016-3741
Published: 2016-07-11
Description: The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/external/libavc/+/cc676ebd95247646e67907ccab150fb77a847335; https://android.googlesource.com/platform/external/libavc/+/e629194c62a9a129ce378e08cb1059a8a53f1795
CVE: CVE-2016-3742
Published: 2016-07-11
Description: decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/external/libavc/+/a583270e1c96d307469c83dc42bd3c5f1b9ef63f; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-3743
Published: 2016-07-11
Description: decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/external/libavc/+/ecf6c7ce6d5a22d52160698aab44fc234c63291a; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-3744
Published: 2016-07-11
Description: Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to gain privileges via a crafted pairing operation, aka internal bug 27930580.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-362
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/system/bt/+/514139f4b40cbb035bb92f3e24d5a389d75db9e6; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-3745
Published: 2016-07-11
Description: Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28173666.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/hardware/qcom/audio/+/073a80800f341325932c66818ce4302b312909a4; http://source.android.com/security/bulletin/2016-07-01.html
CVE: CVE-2016-3746
Published: 2016-07-11
Description: Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27890802.
CVSS Score: 7.8 (HIGH)
References: http://source.android.com/security/bulletin/2016-07-01.html; https://android.googlesource.com/platform/hardware/qcom/media/+/5b82f4f90c3d531313714df4b936f92fb0ff15cf; http://source.android.com/security/bulletin/2016-07-01.html