Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-01-12 CVE-2016-6773 Information Exposure vulnerability in Google Android 6.0/6.0.1/7.0
An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-6771 Improper Access Control vulnerability in Google Android 6.0/6.0.1/7.0
An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level.
local
low complexity
google CWE-284
5.3
2017-01-12 CVE-2016-6769 Improper Access Control vulnerability in Google Android
An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN.
low complexity
google CWE-284
4.6
2017-01-12 CVE-2016-6767 Resource Management Errors vulnerability in Google Android
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-399
5.5
2017-01-12 CVE-2016-6766 Data Processing Errors vulnerability in Google Android
A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-19
5.5
2017-01-12 CVE-2016-6765 Data Processing Errors vulnerability in Google Android
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-19
5.5
2017-01-12 CVE-2016-6764 Resource Management Errors vulnerability in Google Android
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-399
5.5
2017-01-12 CVE-2016-6763 Improper Access Control vulnerability in Google Android
A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-284
5.5
2016-12-23 CVE-2016-6910 Information Exposure vulnerability in Google Android 5.0.2/5.1.1/6.0.1
The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build.
local
low complexity
google CWE-200
5.5
2016-12-13 CVE-2016-6722 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5