Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2016-05-09 CVE-2016-2448 Permissions, Privileges, and Access Controls vulnerability in Google Android
media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly validate entry data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27533704.
local
low complexity
google CWE-264
7.8
2016-05-09 CVE-2016-2446 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27441354.
local
high complexity
google CWE-264
7.0
2016-05-09 CVE-2016-2445 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27253079.
local
high complexity
google CWE-264
7.0
2016-05-09 CVE-2016-2444 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27208332.
local
high complexity
google CWE-264
7.0
2016-05-09 CVE-2016-2443 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525.
local
high complexity
google CWE-264
7.0
2016-05-09 CVE-2016-2442 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26494907.
local
high complexity
google CWE-264
7.0
2016-05-09 CVE-2016-2441 Permissions, Privileges, and Access Controls vulnerability in Google Android
The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26354602.
local
high complexity
google CWE-264
7.0
2016-05-09 CVE-2016-2440 Permissions, Privileges, and Access Controls vulnerability in Google Android
libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 mishandles object references, which allows attackers to gain privileges via a crafted application, aka internal bug 27252896.
local
low complexity
google CWE-264
7.8
2016-05-09 CVE-2016-2439 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268.
low complexity
google CWE-119
8.8
2016-05-09 CVE-2016-2437 Permissions, Privileges, and Access Controls vulnerability in Google Android
The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27436822.
local
low complexity
google CWE-264
7.8