Vulnerabilities > Google > Android > 4.4.4

DATE CVE VULNERABILITY TITLE RISK
2016-07-11 CVE-2013-7457 Unspecified vulnerability in Google Android
Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application.
local
low complexity
google
7.8
2016-06-16 CVE-2016-5300 Resource Management Errors vulnerability in multiple products
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.
7.5
2016-06-16 CVE-2012-6702 Cryptographic Issues vulnerability in multiple products
Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via vectors involving use of the srand function.
network
high complexity
libexpat-project google canonical debian CWE-310
5.9
2016-06-13 CVE-2016-2493 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 26571522.
local
low complexity
google CWE-264
7.8
2016-06-13 CVE-2016-2491 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27556408.
local
low complexity
google CWE-264
7.8
2016-06-13 CVE-2016-2490 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA camera driver in Android before 2016-06-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27533373.
local
low complexity
google CWE-264
7.8
2016-06-13 CVE-2016-2489 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27407629.
local
low complexity
google CWE-264
7.8
2016-06-13 CVE-2016-2488 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm camera driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27600832.
local
low complexity
google CWE-264
7.8
2016-06-13 CVE-2016-2475 Improper Input Validation vulnerability in Google Android
The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges for certain system calls via a crafted application, aka internal bug 26425765.
local
low complexity
google CWE-20
7.8
2016-06-13 CVE-2016-2474 Unspecified vulnerability in Google Android
The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 27424603.
local
low complexity
google
7.8