Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 4.4.1 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2016-2460
mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 does not initialize certain data structures, which allows malicious users to obtain sensitive information via a crafted application, related to IGraphicBufferConsume...
Google Android 4.1Google Android 4.2Google Android 4.4Google Android 4.4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.3.1Google Android 4.0Google Android 4.0.1Google Android 4.0.2Google Android 4.0.3Google Android 5.0Google Android 5.0.1Google Android 5.1.0Google Android 6.0Google Android 4.0.4Google Android 4.1.2Google Android 4.4.1Google Android 4.4.3
7.8
CVSSv3
CVE-2016-6702
A remote code execution vulnerability in libjpeg in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, and 5.1.x prior to 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High ...
Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 5.1.0Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.0.1Google Android 4.1.2Google Android 4.2.1Google Android 4.4.3Google Android 5.0.1Google Android 4.0Google Android 4.2Google Android 4.2.2Google Android 5.0Google Android 5.1
7.8
CVSSv3
CVE-2016-6700
An elevation of privilege vulnerability in libzipfile in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, and 5.1.x prior to 5.1.1 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Critical due...
Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 5.1Google Android 5.1.0Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.4.1Google Android 4.0Google Android 4.2Google Android 4.2.2Google Android 4.4.2Google Android 5.0Google Android 4.0.1Google Android 4.1.2Google Android 4.2.1Google Android 4.4.3Google Android 5.0.1
7.8
CVSSv3
CVE-2016-2420
rootdir/init.rc in Android 4.x prior to 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows malicious users to gain privileges via a crafted application, aka internal bug 26403620.
Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 6.0Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4Google Android 6.0.1Google Android 4.4.2Google Android 4.4Google Android 4.2Google Android 4.1Google Android 4.0.3
7.8
CVSSv3
CVE-2016-2422
Wi-Fi in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows malicious users to gain privileges via a crafted application, as demonstrated by obtai...
Google Android 6.0.1Google Android 6.0Google Android 4.1.2Google Android 5.1Google Android 5.0Google Android 4.2.2Google Android 4.2Google Android 4.0.2Google Android 4.0Google Android 5.1.0Google Android 5.0.1Google Android 4.4.3Google Android 4.3Google Android 4.2.1Google Android 4.0.1Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 4.4.2Google Android 4.4.1Google Android 4.4Google Android 4.3.1
5.5
CVSSv3
CVE-2016-2424
server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 mismanages certain authority data, which allows malicious users to cause a denial of service (reboot loop) via a craft...
Google Android 6.0.1Google Android 6.0Google Android 4.4.1Google Android 4.3.1Google Android 4.1.2Google Android 4.0.4Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.4.2Google Android 4.4Google Android 4.1Google Android 4.0.3Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2
5.5
CVSSv3
CVE-2016-2426
server/content/ContentService.java in the Framework component in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not check for a GET_ACCOUNTS permission, which allows malicious users to obtain sensitive information via a cr...
Google Android 5.0Google Android 4.4.2Google Android 4.2Google Android 4.1Google Android 4.0Google Android 4.4.3Google Android 4.4.1Google Android 4.2.1Google Android 4.1.2Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 6.0.1Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1
9.8
CVSSv3
CVE-2016-2428
libAACdec/src/aacdec_drc.cpp in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 does not properly limit the number of threads, which allows remote malicious users to execute arbitrary code or cause a denial of ser...
Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.0.1Google Android 4.0Google Android 6.0.1Google Android 5.1.0Google Android 4.4.2Google Android 4.4Google Android 4.1Google Android 4.0.3Google Android 6.0Google Android 4.4.1Google Android 4.3.1Google Android 4.0.4Google Android 4.0.2
9.8
CVSSv3
CVE-2016-2429
libFLAC/stream_decoder.c in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 does not prevent free operations on uninitialized memory, which allows remote malicious users to execute arbitrary code or cause a denial...
Google Android 5.0Google Android 4.4.3Google Android 4.4.2Google Android 4.4.1Google Android 6.0.1Google Android 4.2Google Android 4.1.2Google Android 4.1Google Android 4.0.4Google Android 5.1.0Google Android 5.0.1Google Android 4.4Google Android 4.3Google Android 4.2.1Google Android 4.0.3Google Android 4.0.1Google Android 6.0Google Android 5.1Google Android 4.3.1Google Android 4.2.2Google Android 4.0.2Google Android 4.0
7.8
CVSSv3
CVE-2016-2448
media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 does not properly validate entry data structures, which allows malicious users to gain privileges ...
Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.0.1Google Android 4.0Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 6.0Google Android 4.4.1Google Android 4.3.1Google Android 4.0.4Google Android 4.0.2Google Android 6.0.1Google Android 5.1.0Google Android 4.4.2Google Android 4.4Google Android 4.1Google Android 4.0.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook