# CVEs published 2016-07-11

100 CVEs were published on July 11, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7457](https://cve.now/CVE-2013-7457.md): Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted applicat (no CVSS)
- [CVE-2014-9777](https://cve.now/CVE-2014-9777.md): The vid\_dec\_set\_meta\_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on (no CVSS)
- [CVE-2014-9778](https://cve.now/CVE-2014-9778.md): The vid\_dec\_set\_h264\_mv\_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 (no CVSS)
- [CVE-2014-9779](https://cve.now/CVE-2014-9779.md): arch/arm/mach-msm/qdsp6v2/msm\_audio\_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obt (no CVSS)
- [CVE-2014-9780](https://cve.now/CVE-2014-9780.md): drivers/video/msm/mdss/mdp3\_ctrl.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5, 5X, and 6P devices does not validate (no CVSS)
- [CVE-2014-9781](https://cve.now/CVE-2014-9781.md): Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attackers (no CVSS)
- [CVE-2014-9782](https://cve.now/CVE-2014-9782.md): drivers/media/platform/msm/camera\_v2/sensor/actuator/msm\_actuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (no CVSS)
- [CVE-2014-9783](https://cve.now/CVE-2014-9783.md): drivers/media/platform/msm/camera\_v2/sensor/cci/msm\_cci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices (no CVSS)
- [CVE-2014-9784](https://cve.now/CVE-2014-9784.md): Multiple buffer overflows in drivers/char/diag/diag\_debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013 (no CVSS)
- [CVE-2014-9785](https://cve.now/CVE-2014-9785.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices does not validate addresses before (no CVSS)
- [CVE-2014-9786](https://cve.now/CVE-2014-9786.md): Heap-based buffer overflow in drivers/media/platform/msm/camera\_v2/sensor/actuator/msm\_actuator.c in the Qualcomm components in Android befo (no CVSS)
- [CVE-2014-9787](https://cve.now/CVE-2014-9787.md): Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices allows attacker (no CVSS)
- [CVE-2014-9788](https://cve.now/CVE-2014-9788.md): Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to (no CVSS)
- [CVE-2014-9789](https://cve.now/CVE-2014-9789.md): The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm\_audio\_ion.c in the Qualcomm components in Android before 2016-07-05 on Nexu (no CVSS)
- [CVE-2014-9790](https://cve.now/CVE-2014-9790.md): drivers/mmc/core/debugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate pointer (no CVSS)
- [CVE-2014-9792](https://cve.now/CVE-2014-9792.md): arch/arm/mach-msm/ipc\_router.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices uses an incorrect integer data typ (no CVSS)
- [CVE-2014-9793](https://cve.now/CVE-2014-9793.md): platform/msm\_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-pr (no CVSS)
- [CVE-2014-9795](https://cve.now/CVE-2014-9795.md): app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow (no CVSS)
- [CVE-2014-9796](https://cve.now/CVE-2014-9796.md): app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the page size in (no CVSS)
- [CVE-2014-9798](https://cve.now/CVE-2014-9798.md): platform/msm\_shared/dev\_tree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship be (no CVSS)
- [CVE-2014-9799](https://cve.now/CVE-2014-9799.md): The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits the -fno-strict-overflow option t (no CVSS)
- [CVE-2014-9800](https://cve.now/CVE-2014-9800.md): Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers (no CVSS)
- [CVE-2014-9801](https://cve.now/CVE-2014-9801.md): Multiple integer overflows in lib/libfdt/fdt\_rw.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers (no CVSS)
- [CVE-2014-9802](https://cve.now/CVE-2014-9802.md): Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow (no CVSS)
- [CVE-2014-9803](https://cve.now/CVE-2014-9803.md): arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P (no CVSS)
- [CVE-2015-8888](https://cve.now/CVE-2015-8888.md): Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass (no CVSS)
- [CVE-2015-8889](https://cve.now/CVE-2015-8889.md): The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which h (no CVSS)
- [CVE-2015-8890](https://cve.now/CVE-2015-8890.md): platform/msm\_shared/partition\_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not vali (no CVSS)
- [CVE-2015-8891](https://cve.now/CVE-2015-8891.md): Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allo (no CVSS)
- [CVE-2015-8892](https://cve.now/CVE-2015-8892.md): platform/msm\_shared/boot\_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to b (no CVSS)
- [CVE-2015-8893](https://cve.now/CVE-2015-8893.md): app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allows attackers to cause a denial (no CVSS)
- [CVE-2016-2067](https://cve.now/CVE-2016-2067.md): drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) An (no CVSS)
- [CVE-2016-2068](https://cve.now/CVE-2016-2068.md): The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions f (no CVSS)
- [CVE-2016-2501](https://cve.now/CVE-2016-2501.md): The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to gain privileges via a c (no CVSS)
- [CVE-2016-2502](https://cve.now/CVE-2016-2502.md): drivers/usb/gadget/f\_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain pr (no CVSS)
- [CVE-2016-2503](https://cve.now/CVE-2016-2503.md): The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted applicatio (no CVSS)
- [CVE-2016-2505](https://cve.now/CVE-2016-2505.md): mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which al (no CVSS)
- [CVE-2016-2506](https://cve.now/CVE-2016-2506.md): DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-0 (no CVSS)
- [CVE-2016-2507](https://cve.now/CVE-2016-2507.md): Integer overflow in codecs/on2/h264dec/source/h264bsd\_storage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5 (no CVSS)
- [CVE-2016-2508](https://cve.now/CVE-2016-2508.md): media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a (no CVSS)
- [CVE-2016-3741](https://cve.now/CVE-2016-3741.md): The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to e (no CVSS)
- [CVE-2016-3742](https://cve.now/CVE-2016-3742.md): decoder/ih264d\_process\_intra\_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to ex (no CVSS)
- [CVE-2016-3743](https://cve.now/CVE-2016-3743.md): decoder/ih264d\_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attack (no CVSS)
- [CVE-2016-3744](https://cve.now/CVE-2016-3744.md): Buffer overflow in the create\_pbuf function in btif/src/btif\_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before (no CVSS)
- [CVE-2016-3745](https://cve.now/CVE-2016-3745.md): Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allo (no CVSS)
- [CVE-2016-3746](https://cve.now/CVE-2016-3746.md): Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befor (no CVSS)
- [CVE-2016-3747](https://cve.now/CVE-2016-3747.md): Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befor (no CVSS)
- [CVE-2016-3748](https://cve.now/CVE-2016-3748.md): The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted applicatio (no CVSS)
- [CVE-2016-3749](https://cve.now/CVE-2016-3749.md): server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password (no CVSS)
- [CVE-2016-3750](https://cve.now/CVE-2016-3750.md): libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 201 (no CVSS)
- [CVE-2016-3751](https://cve.now/CVE-2016-3751.md): Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befo (no CVSS)
- [CVE-2016-3752](https://cve.now/CVE-2016-3752.md): internal/app/ChooserActivity.java in the ChooserTarget service in Android 6.x before 2016-07-01 mishandles target security checks, which all (no CVSS)
- [CVE-2016-3753](https://cve.now/CVE-2016-3753.md): mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27 (no CVSS)
- [CVE-2016-3754](https://cve.now/CVE-2016-3754.md): mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usa (no CVSS)
- [CVE-2016-3755](https://cve.now/CVE-2016-3755.md): decoder/ih264d\_parse\_pslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remo (no CVSS)
- [CVE-2016-3756](https://cve.now/CVE-2016-3756.md): Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not vali (no CVSS)
- [CVE-2016-3757](https://cve.now/CVE-2016-3757.md): The print\_maps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 all (no CVSS)
- [CVE-2016-3758](https://cve.now/CVE-2016-3758.md): Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, (no CVSS)
- [CVE-2016-3759](https://cve.now/CVE-2016-3759.md): The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a cr (no CVSS)
- [CVE-2016-3760](https://cve.now/CVE-2016-3760.md): Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing (no CVSS)
- [CVE-2016-3761](https://cve.now/CVE-2016-3761.md): NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to ob (no CVSS)
- [CVE-2016-3762](https://cve.now/CVE-2016-3762.md): The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a (no CVSS)
- [CVE-2016-3763](https://cve.now/CVE-2016-3763.md): net/PacProxySelector.java in the Proxy Auto-Config (PAC) feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6. (no CVSS)
- [CVE-2016-3764](https://cve.now/CVE-2016-3764.md): media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, (no CVSS)
- [CVE-2016-3765](https://cve.now/CVE-2016-3765.md): decoder/impeg2d\_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process me (no CVSS)
- [CVE-2016-3766](https://cve.now/CVE-2016-3766.md): MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016 (no CVSS)
- [CVE-2016-3767](https://cve.now/CVE-2016-3767.md): The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, (no CVSS)
- [CVE-2016-3768](https://cve.now/CVE-2016-3768.md): The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows attackers to gain privile (no CVSS)
- [CVE-2016-3769](https://cve.now/CVE-2016-3769.md): The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka A (no CVSS)
- [CVE-2016-3770](https://cve.now/CVE-2016-3770.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka A (no CVSS)
- [CVE-2016-3771](https://cve.now/CVE-2016-3771.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka A (no CVSS)
- [CVE-2016-3772](https://cve.now/CVE-2016-3772.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka A (no CVSS)
- [CVE-2016-3773](https://cve.now/CVE-2016-3773.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka A (no CVSS)
- [CVE-2016-3774](https://cve.now/CVE-2016-3774.md): The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka A (no CVSS)
- [CVE-2016-3775](https://cve.now/CVE-2016-3775.md): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows a (no CVSS)
- [CVE-2016-3792](https://cve.now/CVE-2016-3792.md): CORE/HDD/src/wlan\_hdd\_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace dat (no CVSS)
- [CVE-2016-3793](https://cve.now/CVE-2016-3793.md): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka (no CVSS)
- [CVE-2016-3795](https://cve.now/CVE-2016-3795.md): The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, (no CVSS)
- [CVE-2016-3796](https://cve.now/CVE-2016-3796.md): The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, (no CVSS)
- [CVE-2016-3797](https://cve.now/CVE-2016-3797.md): The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, ak (no CVSS)
- [CVE-2016-3798](https://cve.now/CVE-2016-3798.md): The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted ap (no CVSS)
- [CVE-2016-3799](https://cve.now/CVE-2016-3799.md): The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, (no CVSS)
- [CVE-2016-3800](https://cve.now/CVE-2016-3800.md): The MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, (no CVSS)
- [CVE-2016-3801](https://cve.now/CVE-2016-3801.md): The MediaTek GPS driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, a (no CVSS)
- [CVE-2016-3802](https://cve.now/CVE-2016-3802.md): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted appli (no CVSS)
- [CVE-2016-3803](https://cve.now/CVE-2016-3803.md): The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a craft (no CVSS)
- [CVE-2016-3804](https://cve.now/CVE-2016-3804.md): The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted a (no CVSS)
- [CVE-2016-3805](https://cve.now/CVE-2016-3805.md): The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted a (no CVSS)
- [CVE-2016-3806](https://cve.now/CVE-2016-3806.md): The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted applicatio (no CVSS)
- [CVE-2016-3807](https://cve.now/CVE-2016-3807.md): The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a cra (no CVSS)
- [CVE-2016-3808](https://cve.now/CVE-2016-3808.md): The serial peripheral interface driver in Android before 2016-07-05 on Pixel C devices allows attackers to gain privileges via a crafted app (no CVSS)
- [CVE-2016-3809](https://cve.now/CVE-2016-3809.md): The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus P (no CVSS)
- [CVE-2016-3810](https://cve.now/CVE-2016-3810.md): The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted (no CVSS)
- [CVE-2016-3811](https://cve.now/CVE-2016-3811.md): The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka i (no CVSS)
- [CVE-2016-3812](https://cve.now/CVE-2016-3812.md): The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a c (no CVSS)
- [CVE-2016-3813](https://cve.now/CVE-2016-3813.md): The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via (no CVSS)
- [CVE-2016-3814](https://cve.now/CVE-2016-3814.md): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted appl (no CVSS)
- [CVE-2016-3815](https://cve.now/CVE-2016-3815.md): The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted appl (no CVSS)
- [CVE-2016-3816](https://cve.now/CVE-2016-3816.md): The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a craft (no CVSS)
- [CVE-2016-3818](https://cve.now/CVE-2016-3818.md): libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a crafted file, aka intern (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.