Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-10-10 CVE-2016-6695 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540.
network
low complexity
google CWE-119
critical
9.8
2016-10-10 CVE-2016-6694 Improper Input Validation vulnerability in Google Android
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka Qualcomm internal bug CR 1033525.
network
low complexity
google CWE-20
critical
9.8
2016-10-10 CVE-2016-6693 Improper Input Validation vulnerability in Google Android
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585.
network
low complexity
google CWE-20
critical
9.8
2016-10-10 CVE-2016-6692 NULL Pointer Dereference vulnerability in Google Android
drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via unknown vectors, aka Qualcomm internal bug CR 1004933.
network
low complexity
google CWE-476
critical
9.8
2016-10-10 CVE-2016-6691 Encoding Error vulnerability in Google Android
service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework crash) or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcomm internal bug CR 978452.
network
low complexity
google CWE-172
critical
9.8
2016-10-10 CVE-2016-3929 Unspecified vulnerability in Google Android
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675.
network
low complexity
google
critical
9.8
2016-10-10 CVE-2016-3927 Unspecified vulnerability in Google Android
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244.
network
low complexity
google
critical
9.8
2016-10-10 CVE-2016-3926 Unspecified vulnerability in Google Android
Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953.
network
low complexity
google
critical
9.8
2016-09-11 CVE-2016-3877 Unspecified vulnerability in Google Android
Unspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors.
network
low complexity
google
critical
9.8
2016-08-30 CVE-2016-5344 Integer Overflow or Wraparound vulnerability in multiple products
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.
network
low complexity
google linux CWE-190
critical
9.8