Vulnerabilities > Google > Android > 2.1

DATE CVE VULNERABILITY TITLE RISK
2016-12-06 CVE-2016-5341 Improper Access Control vulnerability in Google Android
The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 (and AndroidID-7225554).
network
google CWE-284
7.1
2016-11-25 CVE-2016-6754 Injection vulnerability in Google Android
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website.
network
google CWE-74
6.8
2016-11-25 CVE-2016-6753 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3
2016-11-25 CVE-2016-6752 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3
2016-11-25 CVE-2016-6751 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3
2016-11-25 CVE-2016-6750 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3
2016-11-25 CVE-2016-6749 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3
2016-11-25 CVE-2016-6748 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3
2016-11-25 CVE-2016-6747 Improper Access Control vulnerability in Google Android
A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot.
network
google CWE-284
7.1
2016-11-25 CVE-2016-6746 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
network
google CWE-200
4.3