Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 4.1 vulnerabilities and exploits

(subscribe to this query)
7.1
CVSSv2
CVE-2016-6712
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-11-01 could enable an malicious user to use a specially crafted file to cause a device hang or reboot. This issue is ...
Google Android 4.0.2Google Android 4.0.3Google Android 4.3Google Android 4.3.1Google Android 4.0.4Google Android 4.1Google Android 4.4.1Google Android 4.4.2Google Android 6.0.1Google Android 4.4Google Android 5.1.0Google Android 6.0Google Android 4.0Google Android 4.0.1Google Android 4.2.1Google Android 4.2.2Google Android 5.0.1Google Android 5.1Google Android 4.1.2Google Android 4.2Google Android 4.4.3Google Android 5.0
9.3
CVSSv2
CVE-2016-2412
include/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01, mishandles certain crashes, which allows malicious users to gain privileges via a crafted application, as demonstr...
Google Android 6.0.1Google Android 6.0Google Android 4.2Google Android 4.1.2Google Android 4.1Google Android 4.0.4Google Android 4.4.3Google Android 4.4.2Google Android 4.4.1Google Android 4.4Google Android 5.1Google Android 5.0Google Android 4.3.1Google Android 4.2.2Google Android 4.0.2Google Android 4.0Google Android 5.1.0Google Android 5.0.1Google Android 4.3Google Android 4.2.1Google Android 4.0.3Google Android 4.0.1
10
CVSSv2
CVE-2016-2416
libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not check for the android.permission.DUMP permission, which allows malicious users to obtain sensitive information, and cons...
Google Android 6.0Google Android 5.1Google Android 4.3.1Google Android 4.2.2Google Android 4.0.4Google Android 4.0.2Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 4.1Google Android 6.0.1Google Android 5.1.0Google Android 4.4Google Android 4.3Google Android 4.0.3Google Android 4.0.1Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.4.2Google Android 4.4.1Google Android 4.0
10
CVSSv2
CVE-2016-2417
media/libmedia/IOMX.cpp in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not initialize a parameter data structure, which allows malicious users to obtain sensitive information from process memory, and cons...
Google Android 4.4.3Google Android 4.4.2Google Android 4.1.2Google Android 4.1Google Android 6.0.1Google Android 6.0Google Android 4.4.1Google Android 4.4Google Android 4.0.4Google Android 4.0.3Google Android 5.0.1Google Android 5.0Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.0Google Android 5.1.0Google Android 5.1Google Android 4.3.1Google Android 4.3Google Android 4.0.2Google Android 4.0.1
9.3
CVSSv2
CVE-2016-2420
rootdir/init.rc in Android 4.x prior to 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows malicious users to gain privileges via a crafted application, aka internal bug 26403620.
Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 6.0Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4Google Android 6.0.1Google Android 4.4.2Google Android 4.4Google Android 4.2Google Android 4.1Google Android 4.0.3
9.3
CVSSv2
CVE-2016-2422
Wi-Fi in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows malicious users to gain privileges via a crafted application, as demonstrated by obtai...
Google Android 6.0.1Google Android 6.0Google Android 4.1.2Google Android 5.1Google Android 5.0Google Android 4.2.2Google Android 4.2Google Android 4.0.2Google Android 4.0Google Android 5.1.0Google Android 5.0.1Google Android 4.4.3Google Android 4.3Google Android 4.2.1Google Android 4.0.1Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 4.4.2Google Android 4.4.1Google Android 4.4Google Android 4.3.1
6.6
CVSSv2
CVE-2016-2423
server/telecom/CallsManager.java in Telephony in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate malicious users to bypass the Factory...
Google Android 6.0.1Google Android 4.4.2Google Android 4.4Google Android 4.2Google Android 4.1Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 6.0Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1
7.1
CVSSv2
CVE-2016-2424
server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 mismanages certain authority data, which allows malicious users to cause a denial of service (reboot loop) via a craft...
Google Android 6.0.1Google Android 6.0Google Android 4.4.1Google Android 4.3.1Google Android 4.1.2Google Android 4.0.4Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.4.2Google Android 4.4Google Android 4.1Google Android 4.0.3Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2
4.3
CVSSv2
CVE-2016-2425
mail/compose/ComposeActivity.java in AOSP Mail in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 supports file:///data attachments, which allows malicious users to obtain sensitive information via a crafted application, aka int...
Google Android 6.0.1Google Android 5.1.0Google Android 4.4Google Android 4.3Google Android 4.1Google Android 4.0.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 6.0Google Android 5.1Google Android 4.4.1Google Android 4.3.1Google Android 4.0.4Google Android 4.0.2Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.4.2Google Android 4.0.1Google Android 4.0
4.3
CVSSv2
CVE-2016-2426
server/content/ContentService.java in the Framework component in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not check for a GET_ACCOUNTS permission, which allows malicious users to obtain sensitive information via a cr...
Google Android 5.0Google Android 4.4.2Google Android 4.2Google Android 4.1Google Android 4.0Google Android 4.4.3Google Android 4.4.1Google Android 4.2.1Google Android 4.1.2Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 6.0.1Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook