Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-01-12 CVE-2016-8397 Information Exposure vulnerability in Linux Kernel 3.10
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
linux CWE-200
5.5
2017-01-12 CVE-2016-8396 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-8395 Unspecified vulnerability in Linux Kernel 3.10
A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device.
local
high complexity
linux
4.7
2017-01-12 CVE-2016-6774 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications.
local
high complexity
google CWE-200
4.7
2017-01-12 CVE-2016-6773 Information Exposure vulnerability in Google Android 6.0/6.0.1/7.0
An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-6771 Improper Access Control vulnerability in Google Android 6.0/6.0.1/7.0
An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level.
local
low complexity
google CWE-284
5.3
2017-01-12 CVE-2016-6769 Improper Access Control vulnerability in Google Android
An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN.
low complexity
google CWE-284
4.6
2017-01-12 CVE-2016-6767 Resource Management Errors vulnerability in Google Android
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-399
5.5
2017-01-12 CVE-2016-6766 Data Processing Errors vulnerability in Google Android
A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-19
5.5
2017-01-12 CVE-2016-6765 Data Processing Errors vulnerability in Google Android
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-19
5.5