# CVEs published 2016-08-07

50 CVEs were published on August 7, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9410](https://cve.now/CVE-2014-9410.md): The vfe31\_proc\_general function in drivers/media/video/msm/vfe/msm\_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qual (no CVSS)
- [CVE-2015-0568](https://cve.now/CVE-2015-0568.md): Use-after-free vulnerability in the msm\_set\_crop function in drivers/media/video/msm/msm\_camera.c in the MSM-Camera driver for the Linux ker (no CVSS)
- [CVE-2015-0573](https://cve.now/CVE-2015-0573.md): drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android (no CVSS)
- [CVE-2015-3854](https://cve.now/CVE-2015-3854.md): packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE\_POWER per (no CVSS)
- [CVE-2016-2063](https://cve.now/CVE-2016-2063.md): Stack-based buffer overflow in the supply\_lm\_input\_write function in drivers/thermal/supply\_lm\_core.c in the MSM Thermal driver for the Linu (no CVSS)
- [CVE-2016-2064](https://cve.now/CVE-2016-2064.md): sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Cente (no CVSS)
- [CVE-2016-2065](https://cve.now/CVE-2016-2065.md): sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Cente (no CVSS)
- [CVE-2016-5340](https://cve.now/CVE-2016-5340.md): The is\_ashmem\_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android patch for the Linux k (no CVSS)
- [CVE-2016-1951](https://cve.now/CVE-2016-1951.md): Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of (no CVSS)
- [CVE-2016-5139](https://cve.now/CVE-2016-5139.md): Multiple integer overflows in the opj\_tcd\_init\_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, (no CVSS)
- [CVE-2016-5140](https://cve.now/CVE-2016-5140.md): Heap-based buffer overflow in the opj\_j2k\_read\_SQcd\_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743. (no CVSS)
- [CVE-2016-5141](https://cve.now/CVE-2016-5141.md): Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional U (no CVSS)
- [CVE-2016-5142](https://cve.now/CVE-2016-5142.md): The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data (no CVSS)
- [CVE-2016-5143](https://cve.now/CVE-2016-5143.md): The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, r (no CVSS)
- [CVE-2016-5144](https://cve.now/CVE-2016-5144.md): The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, r (no CVSS)
- [CVE-2016-5145](https://cve.now/CVE-2016-5145.md): Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation o (no CVSS)
- [CVE-2016-5146](https://cve.now/CVE-2016-5146.md): Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have oth (no CVSS)
- [CVE-2016-4029](https://cve.now/CVE-2016-4029.md): WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote at (no CVSS)
- [CVE-2016-5350](https://cve.now/CVE-2016-5350.md): epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpecte (no CVSS)
- [CVE-2016-5351](https://cve.now/CVE-2016-5351.md): epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL\_R (no CVSS)
- [CVE-2016-5352](https://cve.now/CVE-2016-5352.md): epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attac (no CVSS)
- [CVE-2016-5353](https://cve.now/CVE-2016-5353.md): epan/dissectors/packet-umts\_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/ (no CVSS)
- [CVE-2016-5354](https://cve.now/CVE-2016-5354.md): The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a d (no CVSS)
- [CVE-2016-5355](https://cve.now/CVE-2016-5355.md): wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer proc (no CVSS)
- [CVE-2016-5356](https://cve.now/CVE-2016-5356.md): wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer proces (no CVSS)
- [CVE-2016-5357](https://cve.now/CVE-2016-5357.md): wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer (no CVSS)
- [CVE-2016-5358](https://cve.now/CVE-2016-5358.md): epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows (no CVSS)
- [CVE-2016-5359](https://cve.now/CVE-2016-5359.md): epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers t (no CVSS)
- [CVE-2016-6634](https://cve.now/CVE-2016-6634.md): Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2016-6635](https://cve.now/CVE-2016-6635.md): Cross-site request forgery (CSRF) vulnerability in the wp\_ajax\_wp\_compression\_test function in wp-admin/includes/ajax-actions.php in WordPre (no CVSS)
- [CVE-2013-7456](https://cve.now/CVE-2013-7456.md): gd\_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7. (no CVSS)
- [CVE-2015-8935](https://cve.now/CVE-2015-8935.md): The sapi\_header\_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line foldin (no CVSS)
- [CVE-2016-3078](https://cve.now/CVE-2016-3078.md): Multiple integer overflows in php\_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-b (no CVSS)
- [CVE-2016-3132](https://cve.now/CVE-2016-3132.md): Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl\_dllist.c in PHP 7.x before 7.0.6 allows remote attac (no CVSS)
- [CVE-2016-5093](https://cve.now/CVE-2016-5093.md): The get\_icu\_value\_internal function in ext/intl/locale/locale\_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does (no CVSS)
- [CVE-2016-5094](https://cve.now/CVE-2016-5094.md): Integer overflow in the php\_html\_entities function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attacke (no CVSS)
- [CVE-2016-5095](https://cve.now/CVE-2016-5095.md): Integer overflow in the php\_escape\_html\_entities\_ex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remo (no CVSS)
- [CVE-2016-5096](https://cve.now/CVE-2016-5096.md): Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause (no CVSS)
- [CVE-2016-5114](https://cve.now/CVE-2016-5114.md): sapi/fpm/fpm/fpm\_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return va (no CVSS)
- [CVE-2016-5116](https://cve.now/CVE-2016-5116.md): gd\_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent a (no CVSS)
- [CVE-2016-5766](https://cve.now/CVE-2016-5766.md): Integer overflow in the \_gd2GetHeader function in gd\_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37 (no CVSS)
- [CVE-2016-5767](https://cve.now/CVE-2016-5767.md): Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37 (no CVSS)
- [CVE-2016-5768](https://cve.now/CVE-2016-5768.md): Double free vulnerability in the \_php\_mb\_regex\_ereg\_replace\_exec function in php\_mbregex.c in the mbstring extension in PHP before 5.5.37, 5 (no CVSS)
- [CVE-2016-5769](https://cve.now/CVE-2016-5769.md): Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote (no CVSS)
- [CVE-2016-5770](https://cve.now/CVE-2016-5770.md): Integer overflow in the SplFileObject::fread function in spl\_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 a (no CVSS)
- [CVE-2016-5771](https://cve.now/CVE-2016-5771.md): spl\_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and g (no CVSS)
- [CVE-2016-5772](https://cve.now/CVE-2016-5772.md): Double free vulnerability in the php\_wddx\_process\_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, a (no CVSS)
- [CVE-2016-5773](https://cve.now/CVE-2016-5773.md): php\_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize imp (no CVSS)
- [CVE-2016-6128](https://cve.now/CVE-2016-6128.md): The gdImageCropThreshold function in gd\_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remo (no CVSS)
- [CVE-2016-6515](https://cve.now/CVE-2016-6515.md): The auth\_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.