Vulnerabilities > Google > Android > 5.1.1

DATE CVE VULNERABILITY TITLE RISK
2016-08-05 CVE-2016-3848 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28919417.
local
high complexity
google CWE-264
7.0
2016-08-05 CVE-2016-3847 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28871433.
local
low complexity
google CWE-264
7.8
2016-08-05 CVE-2016-3846 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378.
local
high complexity
google CWE-264
7.0
2016-08-05 CVE-2016-3845 Permissions, Privileges, and Access Controls vulnerability in Google Android
The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28399876.
local
low complexity
google CWE-264
7.8
2016-08-05 CVE-2016-3844 Permissions, Privileges, and Access Controls vulnerability in Google Android
mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517.
local
low complexity
google CWE-264
7.8
2016-08-05 CVE-2016-3843 Permissions, Privileges, and Access Controls vulnerability in Google Android
Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870 and Qualcomm internal bug CR1011071.
local
low complexity
google CWE-264
7.8
2016-08-05 CVE-2016-3842 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm internal bug CR1002974.
local
low complexity
google CWE-264
7.8
2016-08-05 CVE-2016-3827 Encoding Error vulnerability in Google Android
codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28816956.
local
low complexity
google CWE-172
5.5
2016-08-05 CVE-2016-2504 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28026365 and Qualcomm internal bug CR1002974.
local
low complexity
google CWE-264
7.8
2016-08-05 CVE-2014-9902 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element (IE) in an 802.11 management frame, aka Android internal bug 28668638 and Qualcomm internal bugs CR553937 and CR553941.
network
low complexity
google CWE-119
critical
9.8