Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

google android 4.3.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2016-7988

On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a ...
Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1
9.8
CVSSv3

CVE-2016-7990

On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-201...
Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1
7.5
CVSSv3

CVE-2016-7991

On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a...
Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1
5.5
CVSSv3

CVE-2016-3818

libc in Android 4.x prior to 4.4.4 allows remote malicious users to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28740702.
Google Android 4.2Google Android 4.1Google Android 4.0.2Google Android 4.4.3Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 4.2.1Google Android 4.0.3Google Android 4.0Google Android 4.4Google Android 4.4.1Google Android 4.2.2Google Android 4.3.1Google Android 4.4.2Google Android 4.1.2
7.5
CVSSv3

CVE-2016-7989

On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runt...
Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.4.4Google Android 5.0Google Android 5.0.1Google Android 5.0.2Google Android 5.1Google Android 5.1.0Google Android 5.1.1Google Android 6.0Google Android 6.0.1
7.5
CVSSv3

CVE-2016-3753

mediaserver in Android 4.x prior to 4.4.4 allows remote malicious users to obtain sensitive information via unspecified vectors, aka internal bug 27210135.
Google Android 4.2Google Android 4.1Google Android 4.0.2Google Android 4.4.3Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 4.2.1Google Android 4.0.3Google Android 4.0Google Android 4.4Google Android 4.4.1Google Android 4.2.2Google Android 4.3.1Google Android 4.4.2Google Android 4.1.2
9.8
CVSSv3

CVE-2014-7921

mediaserver in Android 4.0.3 up to and including 5.x prior to 5.1 allows malicious users to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920.
Google Android 4.2Google Android 4.1Google Android 5.0.2Google Android 4.4.3Google Android 4.0.4Google Android 4.3Google Android 4.4.4Google Android 4.2.1Google Android 5.0.1Google Android 5.0Google Android 4.0.3Google Android 4.4Google Android 4.4.1Google Android 4.2.2Google Android 4.3.1Google Android 4.4.2Google Android 4.1.2
NA

CVE-2014-8609

The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android prior to 5.0.0 does not properly create a PendingIntent, which allows malicious users to use the SYSTEM uid for broadcasting an intent with arbitrary componen...
Google Android 4.2Google Android 4.1Google Android 4.0.2Google Android 4.4.3Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 4.2.1Google Android 4.0.3Google Android 4.0Google Android 4.4Google Android 4.4.1Google AndroidGoogle Android 4.2.2Google Android 4.3.1Google Android 4.4.2Google Android 4.1.2
5.5
CVSSv3

CVE-2016-6767

A denial of service vulnerability in Mediaserver could enable an malicious user to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4. Android ID: A-31833...
Google Android 4.2Google Android 4.1Google Android 4.0.2Google Android 4.4.3Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 4.4.4Google Android 4.2.1Google Android 4.0.3Google Android 4.0Google Android 4.4Google Android 4.4.1Google Android 4.2.2Google Android 4.3.1Google Android 4.4.2Google Android 4.1.2
7.8
CVSSv3

CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-06-01 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bu...
Google Android 4.1.1Google Android 4.2Google Android 4.1Google Android 6.0.1Google Android 6.0Google Android 4.0.2Google Android 4.0.4Google Android 4.3Google Android 4.0.1Google Android 4.2.1Google Android 5.0.1Google Android 5.0Google Android 4.0.3Google Android 4.0Google Android 4.2.2Google Android 4.3.1Google Android 5.1Google Android 4.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-44685CVE-2024-44053CVE-2024-8522CVE-2024-44059CVE-2024-8059CVE-2024-8503localopen redirectTCP
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook