Skip to content
OpenAdvisories
High WID-SEC-2025-1426 108 CVEs

Google Android: Mehrere Schwachstellen

Published Jul 6, 2016 · Updated Jun 30, 2025 · Revision 8 · de-DE

Vendor: Dell Vendor: Google Vendor: Red Hat Vendor: RIM Vendor: SUSE Product: Android Product: BlackBerry BlackBerry Product: Enterprise Linux Product: Linux Product: NetWorker Platform: Android

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, um seine Rechte zu erweitern, um einen Denial of Service Zustand herbeizuführen und um Informationen offenzulegen.

Product

Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 108

  • Unscored —
    CVE-2013-7457

    Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges v…

  • Unscored —
    CVE-2014-9777

    The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android…

  • Unscored —
    CVE-2014-9778

    The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Andr…

  • Unscored —
    CVE-2014-9779

    arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices al…

  • Unscored —
    CVE-2014-9780

    drivers/video/msm/mdss/mdp3_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devic…

  • Unscored —
    CVE-2014-9781

    Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) dev…

  • Unscored —
    CVE-2014-9782

    drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-0…

  • Unscored —
    CVE-2014-9783

    drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in Android before 2016-07-05 on Ne…

  • Unscored —
    CVE-2014-9784

    Multiple buffer overflows in drivers/char/diag/diag_debugfs.c in the Qualcomm components in Android before 2016-07-05 o…

  • Unscored —
    CVE-2014-9785

    drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not valid…

  • Unscored —
    CVE-2014-9786

    Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm compo…

  • Unscored —
    CVE-2014-9787

    Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) de…

  • Unscored —
    CVE-2014-9788

    Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devic…

  • Unscored —
    CVE-2014-9789

    The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in Android befo…

  • Unscored —
    CVE-2014-9790

    drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does…

  • Unscored —
    CVE-2014-9791 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0196. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2014-9792

    arch/arm/mach-msm/ipc_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incor…

  • Unscored —
    CVE-2014-9793

    platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles …

  • Unscored —
    CVE-2014-9794 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0973. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2014-9795

    app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check fo…

  • Unscored —
    CVE-2014-9796

    app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not vali…

  • Unscored —
    CVE-2014-9797 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0974. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2014-9798

    platform/msm_shared/dev_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not chec…

  • Unscored —
    CVE-2014-9799

    The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-str…

  • Unscored —
    CVE-2014-9800

    Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) dev…

  • Unscored —
    CVE-2014-9801

    Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 de…

  • Unscored —
    CVE-2014-9802

    Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7…

  • Unscored —
    CVE-2014-9803

    arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-0…

  • Unscored —
    CVE-2015-8816

    The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-i…

    linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu
  • Unscored —
    CVE-2015-8888

    Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows…

  • Unscored —
    CVE-2015-8889

    The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery…

  • Unscored —
    CVE-2015-8890

    platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) …

  • Unscored —
    CVE-2015-8891

    Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and …

  • Unscored —
    CVE-2015-8892

    platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices …

  • Unscored —
    CVE-2015-8893

    app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attack…

  • Unscored —
    CVE-2016-0723

    Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users t…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2016-2067 Public exploit

    drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innova…

  • Unscored —
    CVE-2016-2068

    The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) An…

  • Unscored —
    CVE-2016-2107 Public exploit EPSS 89%

    The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a…

    openssl openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-2108 EPSS 78%

    The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-2501

    The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to ga…

  • Unscored —
    CVE-2016-2502

    drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows…

  • Unscored —
    CVE-2016-2503

    The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via…

  • Unscored —
    CVE-2016-2505

    mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain sec…

    android Ubuntu
  • Unscored —
    CVE-2016-2506

    DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, …

    android Ubuntu
  • Unscored —
    CVE-2016-2507

    Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before …

    android Ubuntu
  • Unscored —
    CVE-2016-2508

    media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, …

    android Ubuntu
  • Unscored —
    CVE-2016-3741

    The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows …

    android Ubuntu
  • Unscored —
    CVE-2016-3742

    decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows r…

    android Ubuntu
  • Unscored —
    CVE-2016-3743

    decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which…

    android Ubuntu
  • Unscored —
    CVE-2016-3744

    Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x befor…

    android Ubuntu
  • Unscored —
    CVE-2016-3745

    Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x b…

    android Ubuntu
  • Unscored —
    CVE-2016-3746

    Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x befo…

    android Ubuntu
  • Unscored —
    CVE-2016-3747

    Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x befo…

    android Ubuntu
  • Unscored —
    CVE-2016-3748

    The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via…

  • Unscored —
    CVE-2016-3749 Public exploit

    server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the …

  • Unscored —
    CVE-2016-3750

    libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.…

    android Ubuntu
  • Unscored —
    CVE-2016-3751

    Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befor…

    android Ubuntu
  • Unscored —
    CVE-2016-3752

    internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target secur…

    android Ubuntu
  • Unscored —
    CVE-2016-3753

    mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors…

    android Ubuntu
  • Unscored —
    CVE-2016-3754

    mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not lim…

    android Ubuntu
  • Unscored —
    CVE-2016-3755

    decoder/ih264d_parse_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment fram…

    android Ubuntu
  • Unscored —
    CVE-2016-3756

    Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 201…

    android Ubuntu
  • Unscored —
    CVE-2016-3757

    The print_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x …

    android Ubuntu
  • Unscored —
    CVE-2016-3758

    Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2…

    android android-platform-dalvik Debian Ubuntu
  • Unscored —
    CVE-2016-3759

    The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read…

    android Ubuntu
  • Unscored —
    CVE-2016-3760

    Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privi…

    android Ubuntu
  • Unscored —
    CVE-2016-3761

    NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 a…

    android Ubuntu
  • Unscored —
    CVE-2016-3762

    The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to …

  • Unscored —
    CVE-2016-3763

    net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x…

    android Ubuntu
  • Unscored —
    CVE-2016-3764

    media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,…

    android Ubuntu
  • Unscored —
    CVE-2016-3765

    decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive inform…

    android Ubuntu
  • Unscored —
    CVE-2016-3766

    MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1…

    android Ubuntu
  • Unscored —
    CVE-2016-3767

    The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3768

    The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows atta…

  • Unscored —
    CVE-2016-3769

    The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3770

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3771

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3772

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3773

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3774

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3775

    The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pix…

  • Unscored —
    CVE-2016-3792

    CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mis…

  • Unscored —
    CVE-2016-3793

    The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a craf…

  • Unscored —
    CVE-2016-3794 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-3814. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2016-3795

    The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3796

    The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3797

    The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a cr…

  • Unscored —
    CVE-2016-3798

    The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privil…

  • Unscored —
    CVE-2016-3799

    The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3800

    The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3801

    The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a c…

  • Unscored —
    CVE-2016-3802

    The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privilege…

  • Unscored —
    CVE-2016-3803

    The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain p…

  • Unscored —
    CVE-2016-3804

    The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privi…

  • Unscored —
    CVE-2016-3805

    The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privi…

  • Unscored —
    CVE-2016-3806

    The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via…

  • Unscored —
    CVE-2016-3807

    The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain…

  • Unscored —
    CVE-2016-3808

    The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privile…

  • Unscored —
    CVE-2016-3809

    The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (20…

  • Unscored —
    CVE-2016-3810

    The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive info…

  • Unscored —
    CVE-2016-3811

    The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3812

    The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitiv…

  • Unscored —
    CVE-2016-3813

    The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensi…

  • Unscored —
    CVE-2016-3814

    The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive informati…

  • Unscored —
    CVE-2016-3815

    The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive informati…

  • Unscored —
    CVE-2016-3816

    The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive in…

  • Unscored —
    CVE-2016-3818

    libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a cra…

    android Ubuntu

Revision history

  1. #8

    Neue Updates von Dell aufgenommen

  2. #7

    New remediations available

  3. #6

    New remediations available

  4. #4

    New remediations available

  5. #5

    Version nicht vorhanden

  6. #1

    Initial Release

  7. #2

    Version nicht vorhanden

  8. #3

    Version nicht vorhanden

References