Vulnerabilities > Google > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-12-13 CVE-2016-6720 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-12-13 CVE-2016-6712 Improper Input Validation vulnerability in Google Android
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-20
5.5
2016-12-13 CVE-2016-6711 Improper Input Validation vulnerability in Google Android
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-20
5.5
2016-12-06 CVE-2016-5341 Improper Access Control vulnerability in Google Android
The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 (and AndroidID-7225554).
network
high complexity
google CWE-284
5.9
2016-11-25 CVE-2016-6753 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6752 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6751 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6750 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6749 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2016-11-25 CVE-2016-6748 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5