U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/o:google:android:2.3.5
There are 752 matching records.
Displaying matches 341 through 360.
Vuln ID Summary CVSS Severity
CVE-2016-6676

Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a GET_CFG ioctl call, aka Android internal bug 30874066 and Qualcomm internal bug CR 1000853.

Published: October 10, 2016; 6:59:52 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-6675

Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a linkspeed ioctl call, aka Android internal bug 30873776 and Qualcomm internal bug CR 1000861.

Published: October 10, 2016; 6:59:51 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-6674

system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380.

Published: October 10, 2016; 6:59:50 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 6.8 MEDIUM
CVE-2016-6673

The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 30204201.

Published: October 10, 2016; 6:59:49 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-6672

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal bug 30537088.

Published: October 10, 2016; 6:59:48 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3940

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 30141991.

Published: October 10, 2016; 6:59:45 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3938

drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 30019716 and Qualcomm internal bug CR 1049232.

Published: October 10, 2016; 6:59:42 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3937

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and MediaTek internal bug ALPS02834874.

Published: October 10, 2016; 6:59:41 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3936

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568.

Published: October 10, 2016; 6:59:40 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3935

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999665 and Qualcomm internal bug CR 1046507.

Published: October 10, 2016; 6:59:39 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3934

drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka Android internal bug 30102557 and Qualcomm internal bug CR 789704.

Published: October 10, 2016; 6:59:38 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3933

mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 29421408.

Published: October 10, 2016; 6:59:37 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3932

mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal bug ALPS02770870.

Published: October 10, 2016; 6:59:36 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3931

drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418.

Published: October 10, 2016; 6:59:35 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3930

The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28760138.

Published: October 10, 2016; 6:59:34 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3929

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675.

Published: October 10, 2016; 6:59:33 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 10.0 HIGH
CVE-2016-3928

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and MediaTek internal bug ALPS02829384.

Published: October 10, 2016; 6:59:32 AM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-3927

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244.

Published: October 10, 2016; 6:59:31 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 10.0 HIGH
CVE-2016-3926

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953.

Published: October 10, 2016; 6:59:30 AM -0400 		V3.0: 9.8 CRITICAL
 V2.0: 10.0 HIGH
CVE-2016-3923

The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently gain privileges via a crafted application, aka internal bug 30647115.

Published: October 10, 2016; 6:59:27 AM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 4.3 MEDIUM