rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-3718 
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-05T18:00:00.000Z
CVE-2016-3720 
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T15:00:00.000Z
CVE-2016-3721 
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T00:00:00.000Z
CVE-2016-3722 
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T14:00:00.000Z
CVE-2016-3723 
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T14:00:00.000Z
CVE-2016-3724 
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T14:00:00.000Z
CVE-2016-3725 
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T14:00:00.000Z
CVE-2016-3726 
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T14:00:00.000Z
CVE-2016-3727 
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-17T14:00:00.000Z
CVE-2016-3728 
Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-20T14:00:00.000Z
CVE-2016-3729 
The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T21:00:00.000Z
CVE-2016-3731 
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T21:00:00.000Z
CVE-2016-3732 
The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T21:00:00.000Z
CVE-2016-3733 
The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T21:00:00.000Z
CVE-2016-3734 
Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-20T21:00:00.000Z
CVE-2016-3735 
Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand in order to generate password reset tokens. mt_rand output can be predicted after recovering the seed used to generate it. This low an unauthenticated attacker to take over an account providing they know an administrators email address in order to be able to request password reset.
Problem types: cwe_id: CWE-335
description: CWE-335
Affected products: vendor: n/a
product: Piwigo
Published: 2022-01-28T00:00:00.000Z
CVE-2016-3737 
The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-02T14:00:00.000Z
CVE-2016-3738 
Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-08T17:00:00.000Z
CVE-2016-3739 
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-20T00:00:00.000Z
CVE-2016-3740 
Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-04T18:00:00.000Z
CVE-2016-3741 
The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165661.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3742 
decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3743 
decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3744 
Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to gain privileges via a crafted pairing operation, aka internal bug 27930580.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3745 
Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28173666.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3746 
Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27890802.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3747 
Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27903498.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3748 
The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3749 
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3750 
libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup system call, which allows attackers to bypass an isolation protection mechanism via a crafted application, aka internal bug 28395952.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3751 
Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3752 
internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which allows attackers to gain privileges via a crafted application, aka internal bug 28384423.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3753 
mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3754 
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28615448.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3755 
decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28470138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3756 
Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of partitions, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28556125.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3757 
The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of a memory-mapped file, aka internal bug 28175237.  NOTE: print_maps is not related to the Vic Abell lsof product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3758 
Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides a long filename, aka internal bug 27840771.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3759 
The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application that leverages priv-app access to insert a backup transport, aka internal bug 28406080.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3760 
Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user, aka internal bug 27410683.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3761 
NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3762 
The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application that uses (1) the AF_MSM_IPC socket class or (2) another socket class that is unrecognized by SELinux, aka internal bug 28612709.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3763 
net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, aka internal bug 27593919.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3764 
media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3765 
decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted application, aka internal bug 28168413.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3766 
MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28471206.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3767 
The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28169363 and MediaTek internal bug ALPS02689526.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3768 
The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28172137 and Qualcomm internal bug CR1010644.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3769 
The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3770 
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28346752 and MediaTek internal bug ALPS02703102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3771 
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29007611 and MediaTek internal bug ALPS02703102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3772 
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008188 and MediaTek internal bug ALPS02703102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3773 
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008363 and MediaTek internal bug ALPS02703102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3774 
The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008609 and MediaTek internal bug ALPS02703102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3775 
The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28588279.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3792 
CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, which allows attackers to gain privileges via a crafted application, aka Android internal bug 27725204 and Qualcomm internal bug CR561022.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3793 
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28026625.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3795 
The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28085222 and MediaTek internal bug ALPS02677244.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3796 
The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29008443 and MediaTek internal bug ALPS02677244.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3797 
The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28085680 and Qualcomm internal bug CR1001450.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3798 
The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174490 and MediaTek internal bug ALPS02703105.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3799 
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175025 and MediaTek internal bug ALPS02693738.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3800 
The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175027 and MediaTek internal bug ALPS02693739.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3801 
The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174914 and MediaTek internal bug ALPS02688853.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3802 
The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28271368.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z
CVE-2016-3803 
The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28588434.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-11T01:00:00.000Z