Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 4.4.2 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2016-3897
The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-09-01 includes a password in the return value of a toString method call, which allows malicious users to ...
Google Android 4.1.2Google Android 4.2Google Android 4.0.2Google Android 4.0.3Google Android 4.3Google Android 4.3.1Google Android 5.1Google Android 6.0Google Android 6.0.1Google Android 4.0Google Android 4.0.1Google Android 4.2.1Google Android 4.2.2Google Android 5.0Google Android 5.0.1Google Android 4.4.2Google Android 4.4.3Google Android 4.0.4Google Android 4.1Google Android 4.4Google Android 4.4.1Google Android 5.1.0
7.8
CVSSv3
CVE-2016-2422
Wi-Fi in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows malicious users to gain privileges via a crafted application, as demonstrated by obtai...
Google Android 6.0.1Google Android 6.0Google Android 4.1.2Google Android 5.1Google Android 5.0Google Android 4.2.2Google Android 4.2Google Android 4.0.2Google Android 4.0Google Android 5.1.0Google Android 5.0.1Google Android 4.4.3Google Android 4.3Google Android 4.2.1Google Android 4.0.1Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 4.4.2Google Android 4.4.1Google Android 4.4Google Android 4.3.1
5.5
CVSSv3
CVE-2016-2424
server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 mismanages certain authority data, which allows malicious users to cause a denial of service (reboot loop) via a craft...
Google Android 6.0.1Google Android 6.0Google Android 4.4.1Google Android 4.3.1Google Android 4.1.2Google Android 4.0.4Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.4.2Google Android 4.4Google Android 4.1Google Android 4.0.3Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2
5.5
CVSSv3
CVE-2016-2426
server/content/ContentService.java in the Framework component in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not check for a GET_ACCOUNTS permission, which allows malicious users to obtain sensitive information via a cr...
Google Android 5.0Google Android 4.4.2Google Android 4.2Google Android 4.1Google Android 4.0Google Android 4.4.3Google Android 4.4.1Google Android 4.2.1Google Android 4.1.2Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 6.0.1Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1
7.8
CVSSv3
CVE-2016-2452
codecs/amrnb/dec/SoftAMR.cpp in libstagefright in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 does not validate buffer sizes, which allows malicious users to gain privileges via a crafted application, as demon...
Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4Google Android 6.0.1Google Android 5.0Google Android 4.4.2Google Android 4.2Google Android 4.1
7.8
CVSSv3
CVE-2016-6703
A remote code execution vulnerability in an Android runtime library in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unp...
Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.2.2Google Android 4.3Google Android 4.0Google Android 4.0.1Google Android 4.4.3Google Android 5.0Google Android 5.0.1Google Android 5.1Google Android 4.0.2Google Android 4.0.4Google Android 4.3.1Google Android 4.4.1Google AndroidGoogle Android 4.0.3Google Android 4.1Google Android 4.4Google Android 4.4.2Google Android 6.0Google Android 5.1.0
8.4
CVSSv3
CVE-2016-0846
libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 does not properly consider the heap size, which allows malicious users to gain privileges via a crafted application, as d...
Google Android 6.0.1Google Android 6.0Google Android 5.1.0Google Android 4.4Google Android 4.3.1Google Android 4.0.4Google Android 4.0.3Google Android 5.0Google Android 4.4.3Google Android 4.2.1Google Android 4.2Google Android 4.0Google Android 4.4.2Google Android 4.4.1Google Android 4.1.2Google Android 4.1Google Android 5.1Google Android 5.0.1Google Android 4.3Google Android 4.2.2Google Android 4.0.2Google Android 4.0.1
8.4
CVSSv3
CVE-2016-0848
Race condition in Download Manager in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-04-01 allows malicious users to bypass private-storage file-access restrictions via a crafted application that changes a symlink target, as demonstr...
Google Android 4.4.3Google Android 4.4.2Google Android 4.4.1Google Android 4.4Google Android 4.3.1Google Android 5.1Google Android 5.0Google Android 4.2.2Google Android 4.2Google Android 4.0.2Google Android 4.0Google Android 6.0.1Google Android 6.0Google Android 4.1.2Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 5.1.0Google Android 5.0.1Google Android 4.3Google Android 4.2.1Google Android 4.0.1
9.8
CVSSv3
CVE-2016-2429
libFLAC/stream_decoder.c in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 does not prevent free operations on uninitialized memory, which allows remote malicious users to execute arbitrary code or cause a denial...
Google Android 5.0Google Android 4.4.3Google Android 4.4.2Google Android 4.4.1Google Android 6.0.1Google Android 4.2Google Android 4.1.2Google Android 4.1Google Android 4.0.4Google Android 5.1.0Google Android 5.0.1Google Android 4.4Google Android 4.3Google Android 4.2.1Google Android 4.0.3Google Android 4.0.1Google Android 6.0Google Android 5.1Google Android 4.3.1Google Android 4.2.2Google Android 4.0.2Google Android 4.0
7.8
CVSSv3
CVE-2016-2430
libbacktrace/Backtrace.cpp in debuggerd in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-05-01 allows malicious users to gain privileges via an application containing a crafted symbol name, aka internal bug 27299236.
Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 6.0.1Google Android 5.0Google Android 4.4.2Google Android 4.2Google Android 4.1Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook