deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94496; https://www.tenable.com/security/research/tra-2016-15; http://www.securityfocus.com/bid/94496
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are physically printed on many of the devices.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://seclists.org/bugtraq/2016/Jul/3; https://pbs.twimg.com/media/CmnQ3F0WIAAs_X0.jpg; https://pbs.twimg.com/media/CmnQGI0WAAIbPHA.jpg
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-3956. Reason: This candidate is a duplicate of CVE-2016-3956. Notes: All CVE users should reference CVE-2016-3956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5385. Reason: This candidate is a duplicate of CVE-2016-5385. Notes: All CVE users should reference CVE-2016-5385 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5386. Reason: This candidate is a duplicate of CVE-2016-5386. Notes: All CVE users should reference CVE-2016-5386 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5387. Reason: This candidate is a duplicate of CVE-2016-5387. Notes: All CVE users should reference CVE-2016-5387 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5388. Reason: This candidate is a duplicate of CVE-2016-5388. Notes: All CVE users should reference CVE-2016-5388 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/bid/93967; http://www.vapidlabs.com/advisory.php?v=163; http://www.securityfocus.com/bid/93967
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: XSS and SQLi in huge IT gallery v1.1.5 for Joomla
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-pro; http://www.securityfocus.com/bid/92102; http://www.vapidlabs.com/advisory.php?v=164
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: XSS in huge IT gallery v1.1.5 for Joomla
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-pro; http://www.securityfocus.com/bid/92102; http://www.vapidlabs.com/advisory.php?v=164
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://huge-it.com/joomla-video-gallery/; http://www.securityfocus.com/bid/93107; http://www.vapidlabs.com/advisory.php?v=169
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://huge-it.com/joomla-portfolio-gallery/; http://www.securityfocus.com/bid/93268; http://www.vapidlabs.com/advisory.php?v=170
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://huge-it.com/joomla-catalog/; http://www.vapidlabs.com/advisory.php?v=171; https://www.exploit-db.com/exploits/42598/
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-06
Description: Zotpress plugin for WordPress SQLi in zp_get_account()
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/93894; https://wordpress.org/plugins/zotpress/changelog/; https://wordpress.org/support/topic/sql-injection-in-api_user_id/
CVE: CVE-2015-2080
Published: 2016-10-07
Description: The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.html; http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151804.html
CVE: CVE-2015-5162
Published: 2016-10-07
Description: The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumption) via a crafted disk image.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2016-2923.html; http://rhn.redhat.com/errata/RHSA-2016-2991.html; http://rhn.redhat.com/errata/RHSA-2017-0153.html
CVE: CVE-2015-7363
Published: 2016-10-07
Description: Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.3 allows remote administrators to inject arbitrary web script or HTML via vectors related to report filters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://fortiguard.com/advisory/fortianalyzer-and-fortimanager-stored-xss-vulnerability-in-report-filters; http://www.securityfocus.com/bid/93413; http://www.securitytracker.com/id/1036981
CVE: CVE-2016-3699
Published: 2016-10-07
Description: The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.
CVSS Score: 7.4 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html; http://www.openwall.com/lists/oss-security/2016/09/22/4
CVE: CVE-2016-6273
Published: 2016-10-07
Description: The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix License Server for Windows before 11.14.0.1 and Citrix License Server VPX before 11.14.0.1, allows remote attackers to cause a denial of service (crash) via a type 2F packet with a '01 19' opcode.
CVSS Score: 7.5 (HIGH)
References: http://support.citrix.com/article/CTX217430; http://www.securityfocus.com/bid/93450; http://www.securitytracker.com/id/1037008
CVE: CVE-2016-6323
Published: 2016-10-07
Description: The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00009.html; http://www-01.ibm.com/support/docview.wss?uid=swg21995039; http://www.openwall.com/lists/oss-security/2016/08/18/12
CVE: CVE-2016-7040
Published: 2016-10-07
Description: Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and the web-based UI, which allows remote authenticated users to execute arbitrary shell commands by leveraging the ability to view and filter collections.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-1996.html; http://www.securityfocus.com/bid/93893; http://rhn.redhat.com/errata/RHSA-2016-1996.html
CVE: CVE-2016-7167
Published: 2016-10-07
Description: Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/92975; http://www.securitytracker.com/id/1036813
CVE: CVE-2016-7424
Published: 2016-10-07
Description: The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.debian.org/security/2016/dsa-3685; http://www.openwall.com/lists/oss-security/2016/09/16/17; http://www.openwall.com/lists/oss-security/2016/09/17/1
CVE: CVE-2016-7777
Published: 2016-10-07
Description: Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362
References: http://www.securityfocus.com/bid/93344; http://www.securitytracker.com/id/1036942; http://xenbits.xen.org/xsa/advisory-190.html
CVE: CVE-2016-7901
Published: 2016-10-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-07
Description: flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect
CVSS Score: 7.4 (HIGH)
CWE: CWE-601
References: https://github.com/puiterwijk/flask-oidc/blob/master/flask_oidc/__init__.py#L293; https://github.com/puiterwijk/flask-oidc/blob/master/flask_oidc/__init__.py#L293
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-07
Description: Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/fedora-infra/mirrormanager2/commit/2e227f6023477cbdbefd577f15d0846aa40c8775.patch; https://github.com/fedora-infra/mirrormanager2/commit/eb9b542bc818071b9eee41c3583b7e6e172b3a53.patch; https://github.com/fedora-infra/mirrormanager2/commit/2e227f6023477cbdbefd577f15d0846aa40c8775.patch
CVE: CVE-2[PII_REDACTED]
Published: 2016-10-07
Description: Pagure 2.2.1 XSS in raw file endpoint
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pagure.io/pagure/c/070d63983fe5daef92005ea33d3b8c693c224c77.patch; https://pagure.io/pagure/c/070d63983fe5daef92005ea33d3b8c693c224c77.patch
CVE: CVE-2015-0572
Published: 2016-10-10
Description: Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the ADSPRPC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (zero-value write) or possibly have unspecified other impact via a COMPAT_FASTRPC_IOCTL_INVOKE_FD ioctl call.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93312; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=34ad3d34fbff11b8e1210b9da0dac937fb956b61
CVE: CVE-2015-8950
Published: 2016-10-10
Description: arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5; http://source.android.com/security/bulletin/2016-10-01.html; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3
CVE: CVE-2015-8951
Published: 2016-10-10
Description: Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm internal bug CR 948902.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93317; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ccff36b07bfc49efc77b9f1b55ed2bf0900b1d5b
CVE: CVE-2015-8955
Published: 2016-10-10
Description: arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8fff105e13041e49b82f92eef034f363a6b1c071; http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93314
CVE: CVE-2015-8956
Published: 2016-10-10
Description: The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce[PII_REDACTED]47bcc40bf1eacd; http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html
CVE: CVE-2016-3860
Published: 2016-10-10
Description: sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29323142 and Qualcomm internal bug CR 1038127.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93320; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/sound/soc/msm/qdsp6v2/?id=528976f54be246ec93a71ac53aa4faf3e3791c48
CVE: CVE-2016-3882
Published: 2016-10-10
Description: Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (reboot) via an access point that provides a crafted (1) Venue Group or (2) Venue Type value, aka internal bug 29464811.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93295; https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/35a86eef3c0eef760f7e61c52a343327ba601630
CVE: CVE-2016-3900
Published: 2016-10-10
Description: cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not properly restrict service registration, which allows attackers to gain privileges via a crafted application, aka internal bug 29431260.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93291; https://android.googlesource.com/platform/frameworks/native/+/047eec456943dc082e33220d28abb7df4e089f69
CVE: CVE-2016-3901
Published: 2016-10-10
Description: Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999161 and Qualcomm internal bug CR 1046434.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93327; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5f69ccf3b011c1d14a1b1b00dbaacf74307c9132
CVE: CVE-2016-3902
Published: 2016-10-10
Description: drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93309; https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2fca425d781572393fbe51abe2e27a932d24a768
CVE: CVE-2016-3903
Published: 2016-10-10
Description: drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29513227 and Qualcomm internal bug CR 1040857.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93322; https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b[PII_REDACTED]e8ce024f57c6242d662fcca5e5d55
CVE: CVE-2016-3905
Published: 2016-10-10
Description: CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application that sends a SENDACTIONFRAME command, aka Android internal bug 28061823 and Qualcomm internal bug CR 1001449.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93328; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=b5112838eb91b71eded4b5ee[PII_REDACTED]4e0aef
CVE: CVE-2016-3908
Published: 2016-10-10
Description: The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password, and consequently gain privileges, via a crafted application, aka internal bug 30003944.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93290; https://android.googlesource.com/platform/frameworks/base/+/96daf7d4893f614714761af2d53dfb93214a32e4
CVE: CVE-2016-3909
Published: 2016-10-10
Description: The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30033990.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93296; https://android.googlesource.com/platform/frameworks/av/+/c48ef757cc50906e8726a3bebc3b60716292cdba
CVE: CVE-2016-3910
Published: 2016-10-10
Description: services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93296; https://android.googlesource.com/platform/frameworks/av/+/035cb12f392860113dce96116a5150e2fde6f0cc
CVE: CVE-2016-3911
Published: 2016-10-10
Description: core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30143607.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93303; https://android.googlesource.com/platform/frameworks/base/+/2c7008421cb67f5d89f16911bdbe36f6c35311ad
CVE: CVE-2016-3912
Published: 2016-10-10
Description: The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allow attackers to gain privileges via a crafted application, aka internal bug 30202481.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93302; https://android.googlesource.com/platform/frameworks/base/+/6c049120c2d749f0c0289d822ec7d0aa692f55c5
CVE: CVE-2016-3913
Published: 2016-10-10
Description: media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate a certain static_cast operation, which allows attackers to gain privileges via a crafted application, aka internal bug 30204103.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93296; https://android.googlesource.com/platform/frameworks/av/+/0c3b93c8c2027e74af642967eee5c142c8fd185d
CVE: CVE-2016-3914
Published: 2016-10-10
Description: Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application that modifies a database between two open operations, aka internal bug 30481342.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93300; https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/3a3a5d145d380deef2d5b7c3150864cd04be397f
CVE: CVE-2016-3915
Published: 2016-10-10
Description: camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30591838.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93294; https://android.googlesource.com/platform/system/media/+/e9e44f797742f52996ebf307740dad58c28fd9b5
CVE: CVE-2016-3916
Published: 2016-10-10
Description: camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30741779.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-10-01.html; http://www.securityfocus.com/bid/93294; https://android.googlesource.com/platform/system/media/+/8e7a2b4d13bff03973dbad2bfb88a[PII_REDACTED]3