Skip to content
OpenAdvisories
High WID-SEC-2026-3995 42 CVEs

Google Android: Mehrere Schwachstellen

Published May 2, 2016 · Updated Oct 15, 2026 · Revision 4 · de-DE

Vendor: Google Vendor: RIM Product: Android Product: BlackBerry BlackBerry Platform: Android

Summary

Ein anonymer, entfernter oder eine bösartige lokale Applikation oder ein Angreifer mit physikalischem Zugriff kann diese Schwachstellen in Google Android ausnutzen, um seine Rechte zu erhöhen, Informationen offenzulegen, das System zum Absturz zu bringen, beliebigen Programmcode mit den Rechten des Dienstes auszuführen und um Sicherheitsvorkehrungen zu umgehen.

Product

Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 42

  • Unscored —
    CVE-2015-0569 Public exploit

    Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka …

  • Unscored —
    CVE-2015-0570

    Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver…

  • Unscored —
    CVE-2015-0571

    The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android cont…

  • Unscored —
    CVE-2015-1805 Public exploit

    The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2016-0705 EPSS 26%

    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0774

    The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux packa…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2016-2060

    server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center (QuIC) …

  • Unscored —
    CVE-2016-2428

    libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.…

    android Ubuntu
  • Unscored —
    CVE-2016-2429

    libFLAC/stream_decoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x be…

    android Ubuntu
  • Unscored —
    CVE-2016-2430

    libbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x be…

    android Ubuntu
  • Unscored —
    CVE-2016-2431 Public exploit

    The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devi…

  • Unscored —
    CVE-2016-2432

    The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices allows attackers to ga…

  • Unscored —
    CVE-2016-2433

    The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers t…

  • Unscored —
    CVE-2016-2434 Public exploit

    The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2435

    The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2436

    The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2437

    The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2438 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-2547, CVE-2016-2548. Reason: This candidate is a duplicate of CV…

  • Unscored —
    CVE-2016-2439

    Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1,…

  • Unscored —
    CVE-2016-2440

    libs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x b…

    android Ubuntu
  • Unscored —
    CVE-2016-2441

    The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileg…

  • Unscored —
    CVE-2016-2442

    The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileg…

  • Unscored —
    CVE-2016-2443

    The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows attackers to gain pri…

  • Unscored —
    CVE-2016-2444

    The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2445

    The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2446

    The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2447 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4477. Reason: This candidate is a reservation duplicate of CVE-2…

  • Unscored —
    CVE-2016-2448

    media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x befor…

    android Ubuntu
  • Unscored —
    CVE-2016-2449

    services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0…

    android Ubuntu
  • Unscored —
    CVE-2016-2450

    codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1…

    android Ubuntu
  • Unscored —
    CVE-2016-2451

    codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befo…

    android Ubuntu
  • Unscored —
    CVE-2016-2452

    codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x be…

    android Ubuntu
  • Unscored —
    CVE-2016-2453

    The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-2454

    The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a de…

    android Ubuntu
  • Unscored —
    CVE-2016-2455 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not …

  • Unscored —
    CVE-2016-2456

    The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-2457

    server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01…

    android Ubuntu
  • Unscored —
    CVE-2016-2458

    The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 doe…

  • Unscored —
    CVE-2016-2459

    mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not ini…

    android Ubuntu
  • Unscored —
    CVE-2016-2460

    mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not ini…

    android Ubuntu
  • Unscored —
    CVE-2016-2461

    OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data…

  • Unscored —
    CVE-2016-2462

    OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Dat…

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2016-3537

  2. #3

    New remediations available

  3. #1

    Initial Release

  4. #2

    Version nicht vorhanden

References