Vulnerabilities > Google > Android > 5.1.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-01-12 | CVE-2016-6770 | Improper Access Control vulnerability in Google Android An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. | 3.3 |
2017-01-12 | CVE-2016-6769 | Improper Access Control vulnerability in Google Android An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. | 4.6 |
2017-01-12 | CVE-2016-6768 | Improper Access Control vulnerability in Google Android A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. | 7.8 |
2017-01-12 | CVE-2016-6766 | Data Processing Errors vulnerability in Google Android A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. | 5.5 |
2017-01-12 | CVE-2016-6765 | Data Processing Errors vulnerability in Google Android A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. | 5.5 |
2017-01-12 | CVE-2016-6764 | Resource Management Errors vulnerability in Google Android A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. | 5.5 |
2017-01-12 | CVE-2016-6763 | Improper Access Control vulnerability in Google Android A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device hang or reboot. | 5.5 |
2017-01-12 | CVE-2016-6762 | Permissions, Privileges, and Access Controls vulnerability in Google Android An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of a privileged process. | 7.8 |
2016-12-23 | CVE-2016-6910 | Information Exposure vulnerability in Google Android 5.0.2/5.1.1/6.0.1 The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. | 5.5 |
2016-12-06 | CVE-2016-5341 | Improper Access Control vulnerability in Google Android The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 (and AndroidID-7225554). | 5.9 |