rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-2420 
rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application, aka internal bug 26403620.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2421 
Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26154410.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2422 
Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26324357.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2423 
server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26303187.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2424 
server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mismanages certain authority data, which allows attackers to cause a denial of service (reboot loop) via a crafted application, aka internal bug 26513719.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2425 
mail/compose/ComposeActivity.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 supports file:///data attachments, which allows attackers to obtain sensitive information via a crafted application, aka internal bugs 7154234 and 26989185.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2426 
server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a GET_ACCOUNTS permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 26094635.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2427 
The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen parameter field, which might make it easier for attackers to defeat a cryptographic protection mechanism and discover an authentication key via a crafted application, aka internal bug 26234568.  NOTE: The vendor disputes the existence of this potential issue in Android, stating "This CVE was raised in error: it referred to the authentication tag size in GCM, whose default according to ASN.1 encoding (12 bytes) can lead to vulnerabilities. After careful consideration, it was decided that the insecure default value of 12 bytes was a default only for the encoding and not default anywhere else in Android, and hence no vulnerability existed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-2428 
libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted media file, aka internal bug 26751339.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2429 
libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted media file, aka internal bug 27211885.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2430 
libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to gain privileges via an application containing a crafted symbol name, aka internal bug 27299236.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2431 
The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 24968809.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2432 
The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 25913059.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2433 
The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T20:00:00.000Z
CVE-2016-2434 
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27251090.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2435 
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27297988.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2436 
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27299111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2437 
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27436822.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2439 
Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2440 
libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 mishandles object references, which allows attackers to gain privileges via a crafted application, aka internal bug 27252896.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2441 
The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26354602.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2442 
The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26494907.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2443 
The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2444 
The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27208332.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2445 
The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27253079.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2446 
The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27441354.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2448 
media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly validate entry data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27533704.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2449 
services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate template IDs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27568958.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2450 
codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27569635.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2451 
codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate VPX output buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27597103.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2452 
codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 27662364 and 27843673.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2453 
The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27549705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2454 
The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service (reboot) via a crafted file, aka internal bug 26221024.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2456 
The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27275187.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2457 
server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2458 
The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments, which allows attackers to obtain sensitive information via a crafted application, related to ComposeActivity.java and ComposeActivityEmail.java, aka internal bug 27335139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2459 
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2460 
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27555981.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2461 
OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bugs 27324690 and 27696681.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2462 
OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-2463 
Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2464 
libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2465 
The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27407865.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2466 
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka internal bug 27947307.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2467 
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28029010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2468 
The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2469 
The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27531992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2470 
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27662174.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2471 
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27773913.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2472 
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27776888.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2473 
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27777501.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2474 
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 27424603.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2475 
The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges for certain system calls via a crafted application, aka internal bug 26425765.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2476 
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27207275.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2477 
mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27251096.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2478 
mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27475409.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2479 
The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532282.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2480 
The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate certain OMX parameter data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532721.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2481 
The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532497.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2482 
The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27661749.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2483 
The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27662502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z
CVE-2016-2484 
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793163.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T01:00:00.000Z