Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 4.0.1 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2016-3754
mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-07-01 does not limit process-memory usage, which allows remote malicious users to cause a denial of service (device hang or reboot) via a crafted media file, aka internal ...
Google Android 5.1.0Google Android 5.0.1Google Android 4.4Google Android 4.3Google Android 4.0.3Google Android 4.0.1Google Android 5.0Google Android 6.0.1Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 4.1Google Android 4.4.3Google Android 4.4.2Google Android 4.4.1Google Android 6.0Google Android 5.1Google Android 4.3.1Google Android 4.2.2Google Android 4.0.4Google Android 4.0.2Google Android 4.0
7.8
CVSSv2
CVE-2016-3756
Tremolo/res012.c in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-07-01 does not validate the number of partitions, which allows remote malicious users to cause a denial of service (device hang or reboot) via a crafte...
Google Android 5.0Google Android 4.4.2Google Android 4.2.2Google Android 4.2Google Android 4.0Google Android 6.0.1Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.4.1Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 5.0.1Google Android 4.4.3Google Android 4.2.1Google Android 4.1.2Google Android 4.0.1
5.9
CVSSv2
CVE-2016-3757
The print_maps function in toolbox/lsof.c in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-07-01 allows user-assisted malicious users to gain privileges via a crafted application that attempts to list a long name of a memory-mapped ...
Google Android 6.0Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 6.0.1Google Android 4.4.2Google Android 4.4Google Android 4.2Google Android 4.1
2.1
CVSSv2
CVE-2016-3761
NfcService.java in NFC in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-07-01 allows malicious users to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969.
Google Android 4.4.3Google Android 4.4.1Google Android 4.2.1Google Android 4.1.2Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 6.0.1Google Android 6.0Google Android 5.1.0Google Android 5.1Google Android 5.0.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 5.0Google Android 4.4.2Google Android 4.2Google Android 4.1Google Android 4.0
5
CVSSv2
CVE-2016-3763
net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-07-01 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote malicious us...
Google Android 6.0Google Android 5.1Google Android 4.4.1Google Android 4.3.1Google Android 4.0.4Google Android 4.0.2Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 5.0.1Google Android 5.0Google Android 4.4.3Google Android 4.4.2Google Android 4.0Google Android 6.0.1Google Android 5.1.0Google Android 4.4Google Android 4.3Google Android 4.1Google Android 4.0.3Google Android 4.0.1
7.1
CVSSv2
CVE-2016-3830
codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01 allows remote malicious users to cause a denial of service (device hang or reboot) via crafted ADTS data, aka interna...
Google Android 6.0Google Android 6.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.3.1Google Android 4.4Google Android 5.0.1Google Android 5.0Google Android 4.0.4Google Android 4.1Google Android 4.4.1Google Android 4.4.2Google Android 5.1.0Google Android 5.1Google Android 4.1.2Google Android 4.2Google Android 4.2.1Google Android 4.4.3Google Android 4.0Google Android 4.0.1Google Android 4.2.2Google Android 4.3
5
CVSSv2
CVE-2016-3831
The telephony component in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01 allows remote malicious users to cause a denial of service (device crash) via a NITZ time value of 2038-01-19 or later that is mishandled by the system c...
Google Android 6.0Google Android 6.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.3Google Android 4.3.1Google Android 5.1Google Android 5.1.0Google Android 4.1.2Google Android 4.2Google Android 4.4.3Google Android 4.0Google Android 4.0.1Google Android 4.2.1Google Android 4.2.2Google Android 5.0Google Android 5.0.1Google Android 4.0.4Google Android 4.1Google Android 4.4Google Android 4.4.1Google Android 4.4.2
8.3
CVSSv2
CVE-2016-3832
The framework APIs in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01 do not ensure that package data originated from the Package Manager, which allows malicious users to bypass an unspecified protection mechanism via a crafted ...
Google Android 5.1Google Android 5.1.0Google Android 4.1.2Google Android 4.2Google Android 4.4.3Google Android 5.0Google Android 5.0.1Google Android 4.0.4Google Android 4.1Google Android 4.4.1Google Android 4.4.2Google Android 6.0Google Android 6.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.3Google Android 4.3.1Google Android 4.4Google Android 4.0Google Android 4.0.1Google Android 4.2.1Google Android 4.2.2
4.3
CVSSv2
CVE-2016-3834
The camera APIs in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01 allow malicious users to bypass intended access restrictions and obtain sensitive information about ANW buffer addresses via a crafted application, aka internal ...
Google Android 4.0Google Android 4.0.1Google Android 4.2.1Google Android 4.2.2Google Android 5.1Google Android 5.1.0Google Android 5.0Google Android 5.0.1Google Android 4.0.4Google Android 4.1Google Android 4.4.1Google Android 4.4.2Google Android 4.1.2Google Android 4.2Google Android 4.4.3Google Android 6.0Google Android 6.0.1Google Android 4.0.2Google Android 4.0.3Google Android 4.3Google Android 4.3.1Google Android 4.4
4.3
CVSSv2
CVE-2016-3835
The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01 mishandles heap pointers, which allows malicious users to obtain sensitive information via a crafte...
Google Android 5.1Google Android 5.1.0Google Android 4.2Google Android 4.2.1Google Android 4.4.3Google Android 4.0Google Android 4.0.1Google Android 4.2.2Google Android 4.3Google Android 6.0.1Google Android 6.0Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.3.1Google Android 4.4Google Android 5.0Google Android 5.0.1Google Android 4.1Google Android 4.1.2Google Android 4.4.1Google Android 4.4.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook