2016 VULNERABILITY DATABASE
CVE-2016-2494
Summary: Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28085658.
Published: 6/12/2016 9:59:33 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2493
Summary: The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522.
Published: 6/12/2016 9:59:32 PM
CVE-2016-2492
Summary: The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 28085410.
Published: 6/12/2016 9:59:31 PM
CVE-2016-2491
Summary: The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27556408.
Published: 6/12/2016 9:59:30 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2490
Summary: The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27533373.
Published: 6/12/2016 9:59:29 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2489
Summary: The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27407629.
Published: 6/12/2016 9:59:28 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2488
Summary: The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27600832.
Published: 6/12/2016 9:59:27 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2487
Summary: libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27833616.
Published: 6/12/2016 9:59:26 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2486
Summary: mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793371.
Published: 6/12/2016 9:59:25 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2485
Summary: libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793367.
Published: 6/12/2016 9:59:24 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2484
Summary: libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793163.
Published: 6/12/2016 9:59:23 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2483
Summary: The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27662502.
Published: 6/12/2016 9:59:22 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2482
Summary: The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27661749.
Published: 6/12/2016 9:59:21 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2481
Summary: The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532497.
Published: 6/12/2016 9:59:20 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2480
Summary: The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate certain OMX parameter data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532721.
Published: 6/12/2016 9:59:19 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2479
Summary: The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532282.
Published: 6/12/2016 9:59:18 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2478
Summary: mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27475409.
Published: 6/12/2016 9:59:17 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2477
Summary: mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27251096.
Published: 6/12/2016 9:59:16 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2476
Summary: mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27207275.
Published: 6/12/2016 9:59:15 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 9.3 HIGH
CVE-2016-2475
Summary: The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges for certain system calls via a crafted application, aka internal bug 26425765.
Published: 6/12/2016 9:59:14 PM
CVSS Severity: v3 - 7.8 HIGH v2 - 6.8 MEDIUM