Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2016-4794 | 7.2 |
Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.
|
16-02-2023 - 02:32 | 23-05-2016 - 10:59 | |
CVE-2015-7872 | 2.1 |
The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
|
13-02-2023 - 00:55 | 16-11-2015 - 11:59 | |
CVE-2016-5195 | 7.2 |
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in Oc
|
17-01-2023 - 21:00 | 10-11-2016 - 21:59 | |
CVE-2016-5421 | 6.8 |
Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.
|
08-05-2020 - 17:43 | 10-08-2016 - 14:59 | |
CVE-2016-6704 | 9.3 |
An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within t
|
05-03-2019 - 15:58 | 25-11-2016 - 16:59 | |
CVE-2014-4014 | 6.2 |
The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrate
|
18-12-2018 - 14:31 | 23-06-2014 - 11:21 | |
CVE-2016-5419 | 5.0 |
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
|
13-11-2018 - 11:29 | 10-08-2016 - 14:59 | |
CVE-2016-5420 | 5.0 |
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a diffe
|
13-11-2018 - 11:29 | 10-08-2016 - 14:59 | |
CVE-2016-6492 | 9.3 |
The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.
|
09-10-2018 - 20:00 | 12-01-2017 - 23:59 | |
CVE-2016-8399 | 7.6 |
An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a
|
05-01-2018 - 02:31 | 12-01-2017 - 15:59 | |
CVE-2016-8405 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
04-11-2017 - 01:29 | 12-01-2017 - 15:59 | |
CVE-2016-8397 | 4.3 |
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without expli
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-6916 | 7.2 |
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service (system crash) via unspecified vectors
|
19-10-2017 - 01:30 | 24-04-2017 - 19:59 | |
CVE-2016-6777 | 9.3 |
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-6775 | 9.3 |
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-6915 | 7.2 |
Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
|
19-10-2017 - 01:30 | 24-04-2017 - 20:59 | |
CVE-2016-6789 | 9.3 |
An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to g
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-8400 | 4.3 |
An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive dat
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-8395 | 7.1 |
A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device. This issue is rated as High due to the possib
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-6917 | 7.2 |
Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5.
|
19-10-2017 - 01:30 | 24-04-2017 - 19:59 | |
CVE-2016-6776 | 9.3 |
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device
|
19-10-2017 - 01:30 | 12-01-2017 - 15:59 | |
CVE-2016-8411 | 10.0 |
Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775.
|
07-02-2017 - 18:14 | 27-01-2017 - 17:59 | |
CVE-2016-6772 | 9.3 |
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged proc
|
20-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2014-9909 | 9.3 |
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privilege
|
20-01-2017 - 02:59 | 18-01-2017 - 17:59 | |
CVE-2014-9910 | 7.6 |
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privilege
|
20-01-2017 - 02:59 | 18-01-2017 - 17:59 | |
CVE-2016-6760 | 9.3 |
An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local acces
|
19-01-2017 - 16:18 | 12-01-2017 - 15:59 | |
CVE-2016-6759 | 9.3 |
An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local acces
|
19-01-2017 - 16:18 | 12-01-2017 - 15:59 | |
CVE-2016-6758 | 9.3 |
An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local acces
|
19-01-2017 - 16:18 | 12-01-2017 - 15:59 | |
CVE-2016-6761 | 9.3 |
An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local acces
|
19-01-2017 - 16:17 | 12-01-2017 - 15:59 | |
CVE-2016-6764 | 7.1 |
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.
|
19-01-2017 - 16:13 | 12-01-2017 - 15:59 | |
CVE-2016-6765 | 7.1 |
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: And
|
19-01-2017 - 16:13 | 12-01-2017 - 15:59 | |
CVE-2016-6762 | 6.8 |
An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local a
|
19-01-2017 - 16:13 | 12-01-2017 - 15:59 | |
CVE-2016-6768 | 6.8 |
A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remo
|
19-01-2017 - 16:12 | 12-01-2017 - 15:59 | |
CVE-2016-6767 | 7.1 |
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.
|
19-01-2017 - 16:12 | 12-01-2017 - 15:59 | |
CVE-2016-6769 | 2.1 |
An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. This issue is rated as Moderate because it first requires physical access to an unlocked device where Smart Lock wa
|
19-01-2017 - 16:12 | 12-01-2017 - 15:59 | |
CVE-2016-6766 | 7.1 |
A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service.
|
19-01-2017 - 16:12 | 12-01-2017 - 15:59 | |
CVE-2016-6770 | 4.3 |
An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained
|
19-01-2017 - 16:11 | 12-01-2017 - 15:59 | |
CVE-2016-6773 | 4.3 |
An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data
|
19-01-2017 - 16:08 | 12-01-2017 - 15:59 | |
CVE-2016-6782 | 9.3 |
An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged proc
|
19-01-2017 - 15:45 | 12-01-2017 - 15:59 | |
CVE-2016-6781 | 9.3 |
An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged proc
|
19-01-2017 - 15:40 | 12-01-2017 - 15:59 | |
CVE-2016-6780 | 7.6 |
An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileg
|
19-01-2017 - 15:39 | 12-01-2017 - 15:59 | |
CVE-2016-6763 | 7.1 |
A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of local permanent denial of service. Produ
|
19-01-2017 - 15:39 | 12-01-2017 - 15:59 | |
CVE-2016-6778 | 7.6 |
An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileg
|
19-01-2017 - 15:08 | 12-01-2017 - 15:59 | |
CVE-2016-6779 | 7.6 |
An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileg
|
19-01-2017 - 15:05 | 12-01-2017 - 15:59 | |
CVE-2016-8404 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
18-01-2017 - 20:52 | 12-01-2017 - 15:59 | |
CVE-2016-8403 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
18-01-2017 - 20:49 | 12-01-2017 - 15:59 | |
CVE-2016-8406 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
18-01-2017 - 20:39 | 12-01-2017 - 15:59 | |
CVE-2016-8407 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
18-01-2017 - 20:38 | 12-01-2017 - 15:59 | |
CVE-2016-8409 | 2.6 |
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process
|
18-01-2017 - 20:38 | 12-01-2017 - 15:59 | |
CVE-2016-8408 | 2.6 |
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process
|
18-01-2017 - 20:38 | 12-01-2017 - 15:59 | |
CVE-2016-8410 | 2.6 |
An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged proce
|
18-01-2017 - 20:36 | 12-01-2017 - 15:59 | |
CVE-2016-8401 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
18-01-2017 - 19:43 | 12-01-2017 - 15:59 | |
CVE-2016-8402 | 4.3 |
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as M
|
18-01-2017 - 19:43 | 12-01-2017 - 15:59 | |
CVE-2016-6790 | 9.3 |
An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to g
|
18-01-2017 - 19:37 | 12-01-2017 - 15:59 | |
CVE-2016-6788 | 7.6 |
An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged
|
18-01-2017 - 19:33 | 12-01-2017 - 15:59 | |
CVE-2016-6785 | 9.3 |
An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged proc
|
18-01-2017 - 19:28 | 12-01-2017 - 15:59 | |
CVE-2016-6783 | 9.3 |
An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged proc
|
18-01-2017 - 19:27 | 12-01-2017 - 15:59 | |
CVE-2016-6791 | 7.6 |
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privilege
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-6784 | 9.3 |
An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged proc
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-8393 | 7.6 |
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a pr
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-8391 | 7.6 |
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privilege
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-6774 | 2.6 |
An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate because it first requi
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-8394 | 7.6 |
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a pr
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-6771 | 6.8 |
An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process.
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-6756 | 2.6 |
An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first r
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-6755 | 7.6 |
An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileg
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-8392 | 7.6 |
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privilege
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-8396 | 4.3 |
An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without exp
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 | |
CVE-2016-6757 | 2.6 |
An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first r
|
18-01-2017 - 02:59 | 12-01-2017 - 15:59 |