# CVEs published 2016-07-11

100 CVEs were published on July 11, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7457](https://cve.now/CVE-2013-7457.md): Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2014-9777](https://cve.now/CVE-2014-9777.md): The vid\_dec\_set\_meta\_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05… (no CVSS)
- [CVE-2014-9778](https://cve.now/CVE-2014-9778.md): The vid\_dec\_set\_h264\_mv\_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before… (no CVSS)
- [CVE-2014-9779](https://cve.now/CVE-2014-9779.md): arch/arm/mach-msm/qdsp6v2/msm\_audio\_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to… (no CVSS)
- [CVE-2014-9780](https://cve.now/CVE-2014-9780.md): drivers/video/msm/mdss/mdp3\_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not… (no CVSS)
- [CVE-2014-9781](https://cve.now/CVE-2014-9781.md): Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows… (no CVSS)
- [CVE-2014-9782](https://cve.now/CVE-2014-9782.md): drivers/media/platform/msm/camera\_v2/sensor/actuator/msm\_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and… (no CVSS)
- [CVE-2014-9783](https://cve.now/CVE-2014-9783.md): drivers/media/platform/msm/camera\_v2/sensor/cci/msm\_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013)… (no CVSS)
- [CVE-2014-9784](https://cve.now/CVE-2014-9784.md): Multiple buffer overflows in drivers/char/diag/diag\_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7… (no CVSS)
- [CVE-2014-9785](https://cve.now/CVE-2014-9785.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses… (no CVSS)
- [CVE-2014-9786](https://cve.now/CVE-2014-9786.md): Heap-based buffer overflow in drivers/media/platform/msm/camera\_v2/sensor/actuator/msm\_actuator.c in the Qualcomm components in Android… (no CVSS)
- [CVE-2014-9787](https://cve.now/CVE-2014-9787.md): Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows… (no CVSS)
- [CVE-2014-9788](https://cve.now/CVE-2014-9788.md): Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers… (no CVSS)
- [CVE-2014-9789](https://cve.now/CVE-2014-9789.md): The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm\_audio\_ion.c in the Qualcomm components in Android before 2016-07-05 on… (no CVSS)
- [CVE-2014-9790](https://cve.now/CVE-2014-9790.md): drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate… (no CVSS)
- [CVE-2014-9792](https://cve.now/CVE-2014-9792.md): arch/arm/mach-msm/ipc\_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data… (no CVSS)
- [CVE-2014-9793](https://cve.now/CVE-2014-9793.md): platform/msm\_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on… (no CVSS)
- [CVE-2014-9795](https://cve.now/CVE-2014-9795.md): app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer… (no CVSS)
- [CVE-2014-9796](https://cve.now/CVE-2014-9796.md): app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size… (no CVSS)
- [CVE-2014-9798](https://cve.now/CVE-2014-9798.md): platform/msm\_shared/dev\_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship… (no CVSS)
- [CVE-2014-9799](https://cve.now/CVE-2014-9799.md): The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option… (no CVSS)
- [CVE-2014-9800](https://cve.now/CVE-2014-9800.md): Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows… (no CVSS)
- [CVE-2014-9801](https://cve.now/CVE-2014-9801.md): Multiple integer overflows in lib/libfdt/fdt\_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow… (no CVSS)
- [CVE-2014-9802](https://cve.now/CVE-2014-9802.md): Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices… (no CVSS)
- [CVE-2014-9803](https://cve.now/CVE-2014-9803.md): arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and… (no CVSS)
- [CVE-2015-8888](https://cve.now/CVE-2015-8888.md): Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to… (no CVSS)
- [CVE-2015-8889](https://cve.now/CVE-2015-8889.md): The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which… (no CVSS)
- [CVE-2015-8890](https://cve.now/CVE-2015-8890.md): platform/msm\_shared/partition\_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not… (no CVSS)
- [CVE-2015-8891](https://cve.now/CVE-2015-8891.md): Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices… (no CVSS)
- [CVE-2015-8892](https://cve.now/CVE-2015-8892.md): platform/msm\_shared/boot\_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to… (no CVSS)
- [CVE-2015-8893](https://cve.now/CVE-2015-8893.md): app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a… (no CVSS)
- [CVE-2016-2067](https://cve.now/CVE-2016-2067.md): drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC)… (no CVSS)
- [CVE-2016-2068](https://cve.now/CVE-2016-2068.md): The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions… (no CVSS)
- [CVE-2016-2501](https://cve.now/CVE-2016-2501.md): The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a… (no CVSS)
- [CVE-2016-2502](https://cve.now/CVE-2016-2502.md): drivers/usb/gadget/f\_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain… (no CVSS)
- [CVE-2016-2503](https://cve.now/CVE-2016-2503.md): The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-2505](https://cve.now/CVE-2016-2505.md): mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which… (no CVSS)
- [CVE-2016-2506](https://cve.now/CVE-2016-2506.md): DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before… (no CVSS)
- [CVE-2016-2507](https://cve.now/CVE-2016-2507.md): Integer overflow in codecs/on2/h264dec/source/h264bsd\_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before… (no CVSS)
- [CVE-2016-2508](https://cve.now/CVE-2016-2508.md): media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1… (no CVSS)
- [CVE-2016-3741](https://cve.now/CVE-2016-3741.md): The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to… (no CVSS)
- [CVE-2016-3742](https://cve.now/CVE-2016-3742.md): decoder/ih264d\_process\_intra\_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to… (no CVSS)
- [CVE-2016-3743](https://cve.now/CVE-2016-3743.md): decoder/ih264d\_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote… (no CVSS)
- [CVE-2016-3744](https://cve.now/CVE-2016-3744.md): Buffer overflow in the create\_pbuf function in btif/src/btif\_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x… (no CVSS)
- [CVE-2016-3745](https://cve.now/CVE-2016-3745.md): Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01… (no CVSS)
- [CVE-2016-3746](https://cve.now/CVE-2016-3746.md): Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x… (no CVSS)
- [CVE-2016-3747](https://cve.now/CVE-2016-3747.md): Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x… (no CVSS)
- [CVE-2016-3748](https://cve.now/CVE-2016-3748.md): The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted… (no CVSS)
- [CVE-2016-3749](https://cve.now/CVE-2016-3749.md): server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock… (no CVSS)
- [CVE-2016-3750](https://cve.now/CVE-2016-3750.md): libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before… (no CVSS)
- [CVE-2016-3751](https://cve.now/CVE-2016-3751.md): Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x… (no CVSS)
- [CVE-2016-3752](https://cve.now/CVE-2016-3752.md): internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which… (no CVSS)
- [CVE-2016-3753](https://cve.now/CVE-2016-3753.md): mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug… (no CVSS)
- [CVE-2016-3754](https://cve.now/CVE-2016-3754.md): mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory… (no CVSS)
- [CVE-2016-3755](https://cve.now/CVE-2016-3755.md): decoder/ih264d\_parse\_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows… (no CVSS)
- [CVE-2016-3756](https://cve.now/CVE-2016-3756.md): Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not… (no CVSS)
- [CVE-2016-3757](https://cve.now/CVE-2016-3757.md): The print\_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01… (no CVSS)
- [CVE-2016-3758](https://cve.now/CVE-2016-3758.md): Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before… (no CVSS)
- [CVE-2016-3759](https://cve.now/CVE-2016-3759.md): The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a… (no CVSS)
- [CVE-2016-3760](https://cve.now/CVE-2016-3760.md): Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by… (no CVSS)
- [CVE-2016-3761](https://cve.now/CVE-2016-3761.md): NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to… (no CVSS)
- [CVE-2016-3762](https://cve.now/CVE-2016-3762.md): The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via… (no CVSS)
- [CVE-2016-3763](https://cve.now/CVE-2016-3763.md): net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and… (no CVSS)
- [CVE-2016-3764](https://cve.now/CVE-2016-3764.md): media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before… (no CVSS)
- [CVE-2016-3765](https://cve.now/CVE-2016-3765.md): decoder/impeg2d\_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process… (no CVSS)
- [CVE-2016-3766](https://cve.now/CVE-2016-3766.md): MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before… (no CVSS)
- [CVE-2016-3767](https://cve.now/CVE-2016-3767.md): The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3768](https://cve.now/CVE-2016-3768.md): The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain… (no CVSS)
- [CVE-2016-3769](https://cve.now/CVE-2016-3769.md): The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3770](https://cve.now/CVE-2016-3770.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3771](https://cve.now/CVE-2016-3771.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3772](https://cve.now/CVE-2016-3772.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3773](https://cve.now/CVE-2016-3773.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3774](https://cve.now/CVE-2016-3774.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3775](https://cve.now/CVE-2016-3775.md): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows… (no CVSS)
- [CVE-2016-3792](https://cve.now/CVE-2016-3792.md): CORE/HDD/src/wlan\_hdd\_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace… (no CVSS)
- [CVE-2016-3793](https://cve.now/CVE-2016-3793.md): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application… (no CVSS)
- [CVE-2016-3795](https://cve.now/CVE-2016-3795.md): The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3796](https://cve.now/CVE-2016-3796.md): The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3797](https://cve.now/CVE-2016-3797.md): The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application… (no CVSS)
- [CVE-2016-3798](https://cve.now/CVE-2016-3798.md): The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3799](https://cve.now/CVE-2016-3799.md): The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3800](https://cve.now/CVE-2016-3800.md): The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3801](https://cve.now/CVE-2016-3801.md): The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application… (no CVSS)
- [CVE-2016-3802](https://cve.now/CVE-2016-3802.md): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3803](https://cve.now/CVE-2016-3803.md): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a… (no CVSS)
- [CVE-2016-3804](https://cve.now/CVE-2016-3804.md): The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3805](https://cve.now/CVE-2016-3805.md): The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3806](https://cve.now/CVE-2016-3806.md): The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3807](https://cve.now/CVE-2016-3807.md): The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a… (no CVSS)
- [CVE-2016-3808](https://cve.now/CVE-2016-3808.md): The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted… (no CVSS)
- [CVE-2016-3809](https://cve.now/CVE-2016-3809.md): The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus… (no CVSS)
- [CVE-2016-3810](https://cve.now/CVE-2016-3810.md): The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a… (no CVSS)
- [CVE-2016-3811](https://cve.now/CVE-2016-3811.md): The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-3812](https://cve.now/CVE-2016-3812.md): The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a… (no CVSS)
- [CVE-2016-3813](https://cve.now/CVE-2016-3813.md): The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information… (no CVSS)
- [CVE-2016-3814](https://cve.now/CVE-2016-3814.md): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted… (no CVSS)
- [CVE-2016-3815](https://cve.now/CVE-2016-3815.md): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted… (no CVSS)
- [CVE-2016-3816](https://cve.now/CVE-2016-3816.md): The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a… (no CVSS)
- [CVE-2016-3818](https://cve.now/CVE-2016-3818.md): libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.