Home | History | Annotate | Download | only in bulletin
      1 page.title=Android   - 2016 7
      2 @jd:body
      3 <!--
      4     Copyright 2016 The Android Open Source Project
      5     Licensed under the Apache License, Version 2.0 (the "License");
      6     you may not use this file except in compliance with the License.
      7     You may obtain a copy of the License at
      8         http://www.apache.org/licenses/LICENSE-2.0
      9     Unless required by applicable law or agreed to in writing, software
     10     distributed under the License is distributed on an "AS IS" BASIS,
     11     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     12     See the License for the specific language governing permissions and
     13     limitations under the License.
     14 -->
     15 
     16 <p><em>2016 7 6  | 2016 7 14 </em></p>
     17 <p>Android   Android     
     18  .     
     19 Nexus    . 
     20 Nexus   <a href="https://developers.google.com/android/nexus/images">Google  </a>
     21 .      2016 7 5   
     22  .      
     23 <a href="https://support.google.com/nexus/answer/4457705#nexus_devices"></a> .</p>
     24 <p>
     25     2016 6 6 
     26 .  ,    Android
     27  (AOSP)  . 
     28   AOSP     .</p>
     29 
     30 <p>        
     31   , MMS      
     32         .</p>
     33 <p>        
     34  . SafetyNet  Android   
     35 <a href="{@docRoot}security/enhancements/index.html">Android   </a> 
     36      
     37 <a href="">Android  Google  </a>  .</p>
     38 <p>       .</p>
     39 <h2 id="announcements"></h2>
     40 <ul>
     41   <li>  Android   Android  
     42             
     43             .  
     44       <a href="#common-questions-and-answers">   </a>
     45       .
     46     <ul>
     47        <li><strong>2016-07-01</strong>:     .  
     48           2016-07-01 
     49           .
     50        <li><strong>2016-07-05</strong>:     .  
     51           2016-07-01 2016-07-05 
     52           .</li>
     53      </li></ul>
     54   </li>
     55   <li> Nexus  2016 7 5    OTA
     56         .</li>
     57  </ul>
     58 <h2 id="security_vulnerability_summary">  </h2>
     59 <p>    ,     ID(CVE),
     60    Nexus    
     61  . <a href="{@docRoot}security/overview/updates-resources.html#severity"> </a>
     62         
     63          
     64  .</p>
     65 
     66 <h3 id="2016-07-01_summary">2016-07-01    </h3>
     67 <p>
     68   2016 7 1     .</p>
     69 
     70 <table>
     71   <col width="55%">
     72   <col width="20%">
     73   <col width="13%">
     74   <col width="12%">
     75   <tr>
     76    <th></th>
     77    <th>CVE</th>
     78    <th></th>
     79    <th>Nexus  </th>
     80   </tr>
     81   <tr>
     82    <td>     </td>
     83    <td>CVE-2016-2506, CVE-2016-2505, CVE-2016-2507, CVE-2016-2508,
     84        CVE-2016-3741, CVE-2016-3742, CVE-2016-3743</td>
     85    <td></td>
     86    <td></td>
     87   </tr>
     88   <tr>
     89    <td>OpenSSL &amp; BoringSSL    </td>
     90    <td>CVE-2016-2108</td>
     91    <td></td>
     92    <td></td>
     93   </tr>
     94   <tr>
     95    <td>    </td>
     96    <td>CVE-2016-3744</td>
     97    <td></td>
     98    <td></td>
     99   </tr>
    100   <tr>
    101    <td>libpng   </td>
    102    <td>CVE-2016-3751</td>
    103    <td></td>
    104    <td></td>
    105   </tr>
    106   <tr>
    107    <td>    </td>
    108    <td>CVE-2016-3745, CVE-2016-3746, CVE-2016-3747</td>
    109    <td></td>
    110    <td></td>
    111   </tr>
    112   <tr>
    113    <td>   </td>
    114    <td>CVE-2016-3748</td>
    115    <td></td>
    116    <td></td>
    117   </tr>
    118   <tr>
    119    <td>LockSettingsService   </td>
    120    <td>CVE-2016-3749</td>
    121    <td></td>
    122    <td></td>
    123   </tr>
    124   <tr>
    125    <td> API   </td>
    126    <td>CVE-2016-3750</td>
    127    <td></td>
    128    <td></td>
    129   </tr>
    130   <tr>
    131    <td>ChooserTarget    </td>
    132    <td>CVE-2016-3752</td>
    133    <td></td>
    134    <td></td>
    135   </tr>
    136   <tr>
    137    <td>    </td>
    138    <td>CVE-2016-3753</td>
    139    <td></td>
    140    <td>*</td>
    141   </tr>
    142   <tr>
    143    <td>OpenSSL   </td>
    144    <td>CVE-2016-2107</td>
    145    <td></td>
    146    <td>*</td>
    147   </tr>
    148   <tr>
    149    <td>   (DoS) </td>
    150    <td>CVE-2016-3754, CVE-2016-3755, CVE-2016-3756</td>
    151    <td></td>
    152    <td></td>
    153   </tr>
    154   <tr>
    155    <td>libc  (DoS) </td>
    156    <td>CVE-2016-3818</td>
    157    <td></td>
    158    <td>*</td>
    159   </tr>
    160   <tr>
    161    <td>lsof   </td>
    162    <td>CVE-2016-3757</td>
    163    <td></td>
    164    <td></td>
    165   </tr>
    166   <tr>
    167    <td>DexClassLoader   </td>
    168    <td>CVE-2016-3758</td>
    169    <td></td>
    170    <td></td>
    171   </tr>
    172   <tr>
    173    <td> API   </td>
    174    <td>CVE-2016-3759</td>
    175    <td></td>
    176    <td></td>
    177   </tr>
    178   <tr>
    179    <td>   </td>
    180    <td>CVE-2016-3760</td>
    181    <td></td>
    182    <td></td>
    183   </tr>
    184   <tr>
    185    <td>NFC   </td>
    186    <td>CVE-2016-3761</td>
    187    <td></td>
    188    <td></td>
    189   </tr>
    190   <tr>
    191    <td>   </td>
    192    <td>CVE-2016-3762</td>
    193    <td></td>
    194    <td></td>
    195   </tr>
    196   <tr>
    197    <td>     </td>
    198    <td>CVE-2016-3763</td>
    199    <td></td>
    200    <td></td>
    201   </tr>
    202   <tr>
    203    <td>    </td>
    204    <td>CVE-2016-3764, CVE-2016-3765</td>
    205    <td></td>
    206    <td></td>
    207   </tr>
    208   <tr>
    209    <td>   (DoS) </td>
    210    <td>CVE-2016-3766</td>
    211    <td></td>
    212    <td></td>
    213   </tr>
    214 </table>
    215 <p>*  Nexus      
    216    .</p>
    217 
    218 
    219 <h3 id="2016-07-05_summary">2016-07-05    </h3>
    220 <p>
    221 2016-07-01     2016 7 5
    222     .</p>
    223 
    224 <table>
    225   <col width="55%">
    226   <col width="20%">
    227   <col width="13%">
    228   <col width="12%">
    229   <tr>
    230    <th></th>
    231    <th>CVE</th>
    232    <th></th>
    233    <th>Nexus  </th>
    234   </tr>
    235   <tr>
    236    <td>Qualcomm GPU    (
    237        )</td>
    238    <td>CVE-2016-2503, CVE-2016-2067</td>
    239    <td></td>
    240    <td></td>
    241   </tr>
    242   <tr>
    243    <td>MediaTek Wi-Fi    (
    244        )</td>
    245    <td>CVE-2016-3767</td>
    246    <td></td>
    247    <td></td>
    248   </tr>
    249   <tr>
    250    <td>Qualcomm     
    251        ( )</td>
    252    <td>CVE-2016-3768</td>
    253    <td></td>
    254    <td></td>
    255   </tr>
    256   <tr>
    257    <td>NVIDIA     (
    258        )</td>
    259    <td>CVE-2016-3769</td>
    260    <td></td>
    261    <td></td>
    262   </tr>
    263   <tr>
    264    <td>MediaTek    (
    265        )</td>
    266    <td>CVE-2016-3770, CVE-2016-3771, CVE-2016-3772, CVE-2016-3773,
    267        CVE-2016-3774</td>
    268    <td></td>
    269    <td></td>
    270   </tr>
    271   <tr>
    272    <td>     (
    273        )</td>
    274    <td>CVE-2016-3775</td>
    275    <td></td>
    276    <td></td>
    277   </tr>
    278   <tr>
    279    <td>USB    ( )</td>
    280    <td>CVE-2015-8816</td>
    281    <td></td>
    282    <td></td>
    283   </tr>
    284   <tr>
    285    <td>Qualcomm    (
    286        )</td>
    287    <td>CVE-2014-9794, CVE-2014-9795, CVE-2015-8892, CVE-2013-7457, CVE-2014-9781,
    288        CVE-2014-9786, CVE-2014-9788, CVE-2014-9779, CVE-2014-9780, CVE-2014-9789,
    289        CVE-2014-9793, CVE-2014-9782, CVE-2014-9783, CVE-2014-9785, CVE-2014-9787,
    290        CVE-2014-9784, CVE-2014-9777, CVE-2014-9778, CVE-2014-9790, CVE-2014-9792,
    291        CVE-2014-9797, CVE-2014-9791, CVE-2014-9796, CVE-2014-9800, CVE-2014-9799,
    292        CVE-2014-9801, CVE-2014-9802, CVE-2015-8891, CVE-2015-8888, CVE-2015-8889,
    293        CVE-2015-8890</td>
    294    <td></td>
    295    <td></td>
    296   </tr>
    297   <tr>
    298    <td>Qualcomm USB    (
    299        )</td>
    300    <td>CVE-2016-2502</td>
    301    <td></td>
    302    <td></td>
    303   </tr>
    304   <tr>
    305    <td>Qualcomm Wi-Fi    (
    306        )</td>
    307    <td>CVE-2016-3792</td>
    308    <td></td>
    309    <td></td>
    310   </tr>
    311   <tr>
    312    <td>Qualcomm     (
    313        )</td>
    314    <td>CVE-2016-2501</td>
    315    <td></td>
    316    <td></td>
    317   </tr>
    318   <tr>
    319    <td>NVIDIA     (
    320        )</td>
    321    <td>CVE-2016-3793</td>
    322    <td></td>
    323    <td></td>
    324   </tr>
    325   <tr>
    326    <td>MediaTek     (
    327        )</td>
    328    <td>CVE-2016-3795, CVE-2016-3796</td>
    329    <td></td>
    330    <td></td>
    331   </tr>
    332   <tr>
    333    <td>Qualcomm Wi-Fi    (
    334        )</td>
    335    <td>CVE-2016-3797</td>
    336    <td></td>
    337    <td></td>
    338   </tr>
    339   <tr>
    340    <td>MediaTek      
    341        ( )</td>
    342    <td>CVE-2016-3798</td>
    343    <td></td>
    344    <td></td>
    345   </tr>
    346   <tr>
    347    <td>MediaTek     (
    348        )</td>
    349    <td>CVE-2016-3799, CVE-2016-3800</td>
    350    <td></td>
    351    <td></td>
    352   </tr>
    353   <tr>
    354    <td>MediaTek GPS    (
    355        )</td>
    356    <td>CVE-2016-3801</td>
    357    <td></td>
    358    <td></td>
    359   </tr>
    360   <tr>
    361    <td>     (
    362        )</td>
    363    <td>CVE-2016-3802, CVE-2016-3803</td>
    364    <td></td>
    365    <td></td>
    366   </tr>
    367   <tr>
    368    <td>MediaTek      
    369        ( )</td>
    370    <td>CVE-2016-3804, CVE-2016-3805</td>
    371    <td></td>
    372    <td></td>
    373   </tr>
    374   <tr>
    375    <td>MediaTek     (
    376        )</td>
    377    <td>CVE-2016-3806</td>
    378    <td></td>
    379    <td></td>
    380   </tr>
    381   <tr>
    382    <td>      
    383        ( )</td>
    384    <td>CVE-2016-3807, CVE-2016-3808</td>
    385    <td></td>
    386    <td></td>
    387   </tr>
    388   <tr>
    389    <td>Qualcomm     (
    390        )</td>
    391    <td>CVE-2016-2068</td>
    392    <td></td>
    393    <td></td>
    394   </tr>
    395   <tr>
    396    <td>   ( )</td>
    397    <td>CVE-2014-9803</td>
    398    <td></td>
    399    <td></td>
    400   </tr>
    401   <tr>
    402    <td>    (
    403        )</td>
    404    <td>CVE-2016-3809</td>
    405    <td></td>
    406    <td></td>
    407   </tr>
    408   <tr>
    409    <td>MediaTek Wi-Fi    (
    410        )</td>
    411    <td>CVE-2016-3810</td>
    412    <td></td>
    413    <td></td>
    414   </tr>
    415   <tr>
    416    <td>     (
    417        )</td>
    418    <td>CVE-2016-3811</td>
    419    <td></td>
    420    <td></td>
    421   </tr>
    422   <tr>
    423    <td>MediaTek      
    424        ( )</td>
    425    <td>CVE-2016-3812</td>
    426    <td></td>
    427    <td></td>
    428   </tr>
    429   <tr>
    430    <td>Qualcomm USB    (
    431        )</td>
    432    <td>CVE-2016-3813</td>
    433    <td></td>
    434    <td></td>
    435   </tr>
    436   <tr>
    437    <td>NVIDIA     (
    438        )</td>
    439    <td>CVE-2016-3814, CVE-2016-3815</td>
    440    <td></td>
    441    <td></td>
    442   </tr>
    443   <tr>
    444    <td>MediaTek     (
    445        )</td>
    446    <td>CVE-2016-3816</td>
    447    <td></td>
    448    <td></td>
    449   </tr>
    450   <tr>
    451    <td>     (
    452        )</td>
    453    <td>CVE-2016-0723</td>
    454    <td></td>
    455    <td></td>
    456   </tr>
    457   <tr>
    458    <td>Qualcomm   (DoS) (
    459        )</td>
    460    <td>CVE-2014-9798, CVE-2015-8893</td>
    461    <td></td>
    462    <td></td>
    463   </tr>
    464 </table>
    465 
    466 <h2 id="mitigations">Android  Google  </h2>
    467 <p> SafetyNet  <a href="{@docRoot}security/enhancements/index.html">Android  </a> 
    468       .
    469    Android    
    470 .</p>
    471 <ul>
    472   <li>Android      Android  
    473     .      Android
    474     .</li>
    475   <li>Android  <a href="{@docRoot}security/reports/Google_Android_Security_PHA_classifications.pdf">   </a>
    476   
    477       <a href="{@docRoot}security/reports/Google_Android_Security_2015_Report_Final.pdf">   SafetyNet</a> 
    478   
    479     .   <a href="http://www.android.com/gms">Google  </a> 
    480       
    481   Google Play      . Google Play
    482        
    483         
    484      .   
    485          
    486    .        
    487        .</li>
    488   <li>  Google       
    489      .</li>
    490 </ul>
    491 
    492 <h2 id="acknowledgements"></h2>
    493 <p>    .</p>
    494 <ul>
    495   <li>Chrome  Abhishek Arya, Oliver Chang, Martin Barbella: CVE-2016-3756, CVE-2016-3741, CVE-2016-3743, CVE-2016-3742
    496   <li>Check Point Software Technologies Ltd. Adam Donenfeld et al.: CVE-2016-2503
    497   <li>Google Adam Powell: CVE-2016-3752
    498   <li>Context Information Security Alex Chapman, Paul Stone: CVE-2016-3763
    499   <li><a href="https://www.e2e-assure.com/">e2e-assure</a> Andy Tyler
    500   (<a href="https://twitter.com/ticarpi">@ticarpi</a>): CVE-2016-2457
    501   <li>Google Project Zero Ben Hawkes: CVE-2016-3775
    502   <li><a href="http://c0reteam.org">C0RE</a> Chiachih Wu(<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a>),
    503   Yuan-Tsung Lo(<a href="mailto:computernik (a] gmail.com">computernik (a] gmail.com</a>),
    504   Xuxian Jiang: CVE-2016-3770,
    505   CVE-2016-3771, CVE-2016-3772, CVE-2016-3773, CVE-2016-3774
    506   <li>Google Christopher Tate: CVE-2016-3759
    507   <li>Tencent KeenLab(<a href="https://twitter.com/keen_lab">@keen_lab</a>)
    508   Di Shen(<a href="https://twitter.com/returnsme">@returnsme</a>): CVE-2016-3762
    509   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd.</a> IceSword Lab
    510   Gengjia Chen(<a href="https://twitter.com/chengjia4574">@chengjia4574</a>),
    511   pjf(<a href="http://weibo.com/jfpan">weibo.com/jfpan</a>): CVE-2016-3806,
    512   CVE-2016-3816, CVE-2016-3805, CVE-2016-3804, CVE-2016-3767, CVE-2016-3810,
    513   CVE-2016-3795, CVE-2016-3796
    514   <li>Google Android Greg Kaiser: CVE-2016-3758
    515   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd</a>.
    516 Mobile Safe Team Guang Gong()
    517 (<a href="https://twitter.com/oldfresher">@oldfresher</a>): CVE-2016-3764
    518   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd</a>. Mobile Safe Team
    519   Hao Chen, Guang Gong: CVE-2016-3792, CVE-2016-3768
    520   <li><a href="http://www.cmcm.com">Cheetah Mobile</a> Security Research Lab
    521   Hao Qin: CVE-2016-3754, CVE-2016-3766
    522   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd</a>.
    523   IceSword Lab Jianqiang Zhao(<a href="https://twitter.com/jianqiangzhao">@jianqiangzhao</a>),
    524   pjf(<a href="http://weibo.com/jfpan">weibo.com/jfpan</a>): CVE-2016-3814,CVE-2016-3802,
    525   CVE-2016-3769, CVE-2016-3807, CVE-2016-3808
    526   <li>Google Marco Nelissen: CVE-2016-3818
    527   <li>Google Project Zero Mark Brand: CVE-2016-3757
    528   <li><a href="https://github.com/michalbednarski">Micha Bednarski</a>: CVE-2016-3750
    529   <li><a href="http://c0reteam.org">C0RE</a> Mingjian Zhou(<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>),
    530   Chiachih Wu(<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a>),
    531   Xuxian Jiang: CVE-2016-3747,
    532   CVE-2016-3746, CVE-2016-3765
    533   <li>Alibaba Mobile Security Group Peng Xiao, Chengming Yang, Ning You,
    534   Chao Yang, Yang Ssong: CVE-2016-3800, CVE-2016-3799, CVE-2016-3801,
    535   CVE-2016-3812, CVE-2016-3798
    536   <li>Trend Micro Peter Pi(<a href="https://twitter.com/heisecode">@heisecode</a>):
    537   CVE-2016-3793
    538   <li>Google Ricky Wai: CVE-2016-3749
    539   <li>Roeland Krak: CVE-2016-3753
    540   <li>Scott Bauer(<a href="https://twitter.com/ScottyBauer1">@ScottyBauer1</a>):
    541   CVE-2016-3797, CVE-2016-3813, CVE-2016-3815, CVE-2016-2501, CVE-2016-2502
    542   <li>Vasily Vasilev: CVE-2016-2507
    543   <li>Alibaba Inc. Weichao Sun(<a href="https://twitter.com/sunblate">@sunblate</a>)
    544 : CVE-2016-2508, CVE-2016-3755
    545   <li>Tencent KeenLab(<a href="https://twitter.com/keen_lab">@keen_lab</a>)
    546   Wen Niu(<a href="https://twitter.com/NWMonster">@NWMonster</a>): CVE-2016-3809
    547   <li>Tencent Security Platform Department Xiling Gong: CVE-2016-3745
    548   <li>Chinese Academy of Sciences Institute of Software TCA Lab Yacong Gu:
    549   CVE-2016-3761
    550   <li>Tencent Xuanwu LAB Yongke Wang(<a href="https://twitter.com/Rudykewang">@Rudykewang</a>)
    551   : CVE-2016-2505
    552   <li>Tencent Xuanwu LAB Yongke Wang(<a href="https://twitter.com/Rudykewang">@Rudykewang</a>),
    553   Wei Wei(<a href="https://twitter.com/Danny__Wei">@Danny__Wei</a>)
    554   : CVE-2016-2506
    555   <li>Baidu X-Lab Yulong Zhang, Tao (Lenx) Wei: CVE-2016-3744</li>
    556 </li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></ul>
    557 
    558 <h2 id="2016-07-01_details">2016-07-01     </h2>
    559 <p>   <a href="#2016-07-01_summary">2016-07-01   
    560  </a>    
    561 .   ,   
    562 CVE,  , ,  Nexus ,
    563  AOSP ( ),      .  
    564 AOSP         ID
    565 .        
    566   ID    .</p>
    567 
    568 <h3 id="remote-code-execution-vulnerability-in-mediaserver">
    569      </h3>
    570 <p>          
    571           
    572 .           
    573   .   
    574       
    575       .</p>
    576 <p>    ,  
    577    ,  MMS   
    578    .</p>
    579 
    580 <table>
    581   <col width="19%">
    582   <col width="19%">
    583   <col width="10%">
    584   <col width="16%">
    585   <col width="17%">
    586   <col width="17%">
    587   <tr>
    588    <th>CVE</th>
    589    <th></th>
    590    <th></th>
    591    <th> Nexus </th>
    592    <th> AOSP </th>
    593    <th> </th>
    594   </tr>
    595   <tr>
    596    <td>CVE-2016-2506</td>
    597    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/e248db02fbab2ee9162940bc19f087fd7d96cb9d">
    598        A-28175045</a></td>
    599    <td></td>
    600    <td><a href="#all_nexus"> Nexus</a></td>
    601    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    602    <td>2016 4 11</td>
    603   </tr>
    604   <tr>
    605    <td>CVE-2016-2505</td>
    606    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/4f236c532039a61f0cf681d2e3c6e022911bbb5c">
    607        A-28333006</a></td>
    608    <td></td>
    609    <td><a href="#all_nexus"> Nexus</a></td>
    610    <td>6.0, 6.0.1</td>
    611    <td>2016 4 21</td>
    612   </tr>
    613   <tr>
    614    <td>CVE-2016-2507</td>
    615    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/60547808ca4e9cfac50028c00c58a6ceb2319301">
    616        A-28532266</a></td>
    617    <td></td>
    618    <td><a href="#all_nexus"> Nexus</a></td>
    619    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    620    <td>2016 5 2</td>
    621   </tr>
    622   <tr>
    623    <td>CVE-2016-2508</td>
    624    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/f81038006b4c59a5a148dcad887371206033c28f">
    625        A-28799341</a>
    626        [<a href="https://android.googlesource.com/platform/frameworks/av/+/d112f7d0c1dbaf0368365885becb11ca8d3f13a4">2</a>]
    627    </td>
    628    <td></td>
    629    <td><a href="#all_nexus"> Nexus</a></td>
    630    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    631    <td>2016 5 16</td>
    632   </tr>
    633   <tr>
    634    <td>CVE-2016-3741</td>
    635    <td><a href="https://android.googlesource.com/platform/external/libavc/+/e629194c62a9a129ce378e08cb1059a8a53f1795">
    636        A-28165661</a>
    637        [<a href="https://android.googlesource.com/platform/external/libavc/+/cc676ebd95247646e67907ccab150fb77a847335">2</a>]
    638    </td>
    639    <td></td>
    640    <td><a href="#all_nexus"> Nexus</a></td>
    641    <td>6.0, 6.0.1</td>
    642    <td>Google </td>
    643   </tr>
    644   <tr>
    645    <td>CVE-2016-3742</td>
    646    <td><a href="https://android.googlesource.com/platform/external/libavc/+/a583270e1c96d307469c83dc42bd3c5f1b9ef63f">
    647        A-28165659</a>
    648    </td>
    649    <td></td>
    650    <td><a href="#all_nexus"> Nexus</a></td>
    651    <td>6.0, 6.0.1</td>
    652    <td>Google </td>
    653   </tr>
    654   <tr>
    655    <td>CVE-2016-3743</td>
    656    <td><a href="https://android.googlesource.com/platform/external/libavc/+/ecf6c7ce6d5a22d52160698aab44fc234c63291a">
    657        A-27907656</a>
    658    </td>
    659    <td></td>
    660    <td><a href="#all_nexus"> Nexus</a></td>
    661    <td>6.0, 6.0.1</td>
    662    <td>Google </td>
    663   </tr>
    664 </table>
    665 
    666 
    667 <h3 id="remote-code-execution-vulnerability-in-openssl-&amp;-boringssl">
    668 OpenSSL &amp; BoringSSL    </h3>
    669 <p>OpenSSL  BoringSSL         
    670         
    671 .           
    672   .</p>
    673 
    674 <table>
    675   <col width="19%">
    676   <col width="16%">
    677   <col width="10%">
    678   <col width="19%">
    679   <col width="18%">
    680   <col width="16%">
    681   <tr>
    682    <th>CVE</th>
    683    <th></th>
    684    <th></th>
    685    <th> Nexus </th>
    686    <th> AOSP </th>
    687    <th> </th>
    688   </tr>
    689   <tr>
    690    <td>CVE-2016-2108</td>
    691    <td><a href="https://android.googlesource.com/platform/external/boringssl/+/74750e1fb24149043a533497f79c577b704d6e30">
    692        A-28175332</a>
    693    </td>
    694    <td></td>
    695    <td><a href="#all_nexus"> Nexus</a></td>
    696    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    697    <td>2016 5 3</td>
    698   </tr>
    699 </table>
    700 
    701 <h3 id="remote-code-execution-vulnerability-in-bluetooth">
    702     </h3>
    703 <p>         
    704     .  
    705         
    706   .</p>
    707 
    708 <table>
    709   <col width="19%">
    710   <col width="16%">
    711   <col width="10%">
    712   <col width="19%">
    713   <col width="18%">
    714   <col width="16%">
    715   <tr>
    716    <th>CVE</th>
    717    <th></th>
    718    <th></th>
    719    <th> Nexus </th>
    720    <th> AOSP </th>
    721    <th> </th>
    722   </tr>
    723   <tr>
    724    <td>CVE-2016-3744</td>
    725    <td><a href="https://android.googlesource.com/platform/system/bt/+/514139f4b40cbb035bb92f3e24d5a389d75db9e6">
    726        A-27930580</a></td>
    727    <td></td>
    728    <td><a href="#all_nexus"> Nexus</a></td>
    729    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    730    <td>2016 3 30</td>
    731   </tr>
    732 </table>
    733 
    734 <h3 id="elevation-of-privilege-vulnerability-in-libpng">
    735 libpng   </h3>
    736 <p>libpng       
    737         
    738 .        
    739 <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a> 
    740 <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>  
    741            .</p>
    742 
    743 <table>
    744   <col width="19%">
    745   <col width="16%">
    746   <col width="10%">
    747   <col width="19%">
    748   <col width="18%">
    749   <col width="16%">
    750   <tr>
    751    <th>CVE</th>
    752    <th></th>
    753    <th></th>
    754    <th> Nexus </th>
    755    <th> AOSP </th>
    756    <th> </th>
    757   </tr>
    758   <tr>
    759    <td>CVE-2016-3751</td>
    760    <td><a href="https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca">
    761        A-23265085</a>
    762    </td>
    763    <td></td>
    764    <td><a href="#all_nexus"> Nexus</a></td>
    765    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    766    <td>2015 12 3</td>
    767   </tr>
    768 </table>
    769 
    770 <h3 id="elevation-of-privilege-vulnerability-in-mediaserver">
    771     </h3>
    772 <p>                  .   <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a>  <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>
    773       
    774            .</p>
    775 
    776 <table>
    777   <col width="19%">
    778   <col width="16%">
    779   <col width="10%">
    780   <col width="19%">
    781   <col width="18%">
    782   <col width="16%">
    783   <tr>
    784    <th>CVE</th>
    785    <th></th>
    786    <th></th>
    787    <th> Nexus </th>
    788    <th> AOSP </th>
    789    <th> </th>
    790   </tr>
    791   <tr>
    792    <td>CVE-2016-3745</td>
    793    <td><a href="https://android.googlesource.com/platform/hardware/qcom/audio/+/073a80800f341325932c66818ce4302b312909a4">
    794        A-28173666</a>
    795    </td>
    796    <td></td>
    797    <td><a href="#all_nexus"> Nexus</a></td>
    798    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    799    <td>2016 4 10</td>
    800   </tr>
    801   <tr>
    802    <td>CVE-2016-3746</td>
    803    <td><a href="https://android.googlesource.com/platform/hardware/qcom/media/+/5b82f4f90c3d531313714df4b936f92fb0ff15cf">
    804        A-27890802</a>
    805    </td>
    806    <td></td>
    807    <td><a href="#all_nexus"> Nexus</a></td>
    808    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    809    <td>2016 3 27</td>
    810   </tr>
    811   <tr>
    812    <td>CVE-2016-3747</td>
    813    <td><a href="https://android.googlesource.com/platform/hardware/qcom/media/+/4ed06d14080d8667d5be14eed200e378cba78345">
    814        A-27903498</a>
    815    </td>
    816    <td></td>
    817    <td><a href="#all_nexus"> Nexus</a></td>
    818    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    819    <td>2016 3 28</td>
    820   </tr>
    821 </table>
    822 
    823 <h3 id="elevation-of-privilege-vulnerability-in-sockets">
    824    </h3>
    825 <p>         
    826      .
    827         
    828        
    829 .</p>
    830 
    831 <table>
    832   <col width="19%">
    833   <col width="16%">
    834   <col width="10%">
    835   <col width="19%">
    836   <col width="18%">
    837   <col width="16%">
    838   <tr>
    839    <th>CVE</th>
    840    <th></th>
    841    <th></th>
    842    <th> Nexus </th>
    843    <th> AOSP </th>
    844    <th> </th>
    845   </tr>
    846   <tr>
    847    <td>CVE-2016-3748</td>
    848    <td><a href="https://android.googlesource.com/platform/external/sepolicy/+/556bb0f55324e8839d7b735a0de9bc31028e839e">
    849        A-28171804</a>
    850    </td>
    851    <td></td>
    852    <td><a href="#all_nexus"> Nexus</a></td>
    853    <td>6.0, 6.0.1</td>
    854    <td>2016 4 13</td>
    855   </tr>
    856 </table>
    857 
    858 <h3 id="elevation-of-privilege-vulnerability-in-locksettingsservice">
    859 LockSettingsService   </h3>
    860 <p>LockSettingsService    
    861        
    862   .        
    863           .</p>
    864 
    865 <table>
    866   <col width="19%">
    867   <col width="16%">
    868   <col width="10%">
    869   <col width="19%">
    870   <col width="17%">
    871   <col width="17%">
    872   <tr>
    873    <th>CVE</th>
    874    <th></th>
    875    <th></th>
    876    <th> Nexus </th>
    877    <th> AOSP </th>
    878    <th> </th>
    879   </tr>
    880   <tr>
    881    <td>CVE-2016-3749</td>
    882    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/e83f0f6a5a6f35323f5367f99c8e287c440f33f5">
    883        A-28163930</a>
    884    </td>
    885    <td></td>
    886    <td><a href="#all_nexus"> Nexus</a></td>
    887    <td>6.0, 6.0.1</td>
    888    <td>Google </td>
    889   </tr>
    890 </table>
    891 
    892 <h3 id="elevation-of-privilege-vulnerability-in-framework-apis">
    893  API   </h3>
    894 <p>Parcels  API      
    895      
    896     .   
    897           
    898  .</p>
    899 
    900 <table>
    901   <col width="19%">
    902   <col width="16%">
    903   <col width="10%">
    904   <col width="19%">
    905   <col width="17%">
    906   <col width="17%">
    907   <tr>
    908    <th>CVE</th>
    909    <th></th>
    910    <th></th>
    911    <th> Nexus </th>
    912    <th> AOSP </th>
    913    <th> </th>
    914   </tr>
    915   <tr>
    916    <td>CVE-2016-3750</td>
    917    <td><a href="https://android.googlesource.com/platform/frameworks/native/+/54cb02ad733fb71b1bdf78590428817fb780aff8">
    918        A-28395952</a>
    919    </td>
    920    <td></td>
    921    <td><a href="#all_nexus"> Nexus</a></td>
    922    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    923    <td>2015 12 16</td>
    924   </tr>
    925 </table>
    926 
    927 <h3 id="elevation-of-privilege-vulnerability-in-choosertarget-service">
    928 ChooserTarget    </h3>
    929 <p>ChooserTarget        
    930      
    931 .          
    932      .</p>
    933 
    934 <table>
    935   <col width="19%">
    936   <col width="16%">
    937   <col width="10%">
    938   <col width="19%">
    939   <col width="17%">
    940   <col width="17%">
    941   <tr>
    942    <th>CVE</th>
    943    <th></th>
    944    <th></th>
    945    <th> Nexus </th>
    946    <th> AOSP </th>
    947    <th> </th>
    948   </tr>
    949   <tr>
    950    <td>CVE-2016-3752</td>
    951    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/ddbf2db5b946be8fdc45c7b0327bf560b2a06988">
    952        A-28384423</a>
    953    </td>
    954    <td></td>
    955    <td><a href="#all_nexus"> Nexus</a></td>
    956    <td>6.0, 6.0.1</td>
    957    <td>Google </td>
    958   </tr>
    959 </table>
    960 
    961 <h3 id="information-disclosure-vulnerability-in-mediaserver">
    962     </h3>
    963 <p>        
    964          
    965   .        
    966     .</p>
    967 
    968 <table>
    969   <col width="19%">
    970   <col width="16%">
    971   <col width="10%">
    972   <col width="19%">
    973   <col width="18%">
    974   <col width="16%">
    975   <tr>
    976    <th>CVE</th>
    977    <th></th>
    978    <th></th>
    979    <th> Nexus </th>
    980    <th> AOSP </th>
    981    <th> </th>
    982   </tr>
    983   <tr>
    984    <td>CVE-2016-3753</td>
    985    <td>A-27210135</td>
    986    <td></td>
    987    <td>*</td>
    988    <td>4.4.4</td>
    989    <td>2016 2 15</td>
    990   </tr>
    991 </table>
    992 <p>*  Nexus      
    993    .</p>
    994 
    995 <h3 id="information-disclosure-vulnerability-in-openssl">
    996 OpenSSL   </h3>
    997 <p>OpenSSL       
    998          
    999   .        
   1000     .</p>
   1001 
   1002 <table>
   1003   <col width="19%">
   1004   <col width="16%">
   1005   <col width="10%">
   1006   <col width="19%">
   1007   <col width="18%">
   1008   <col width="16%">
   1009   <tr>
   1010    <th>CVE</th>
   1011    <th></th>
   1012    <th></th>
   1013    <th> Nexus </th>
   1014    <th> AOSP </th>
   1015    <th> </th>
   1016   </tr>
   1017   <tr>
   1018    <td>CVE-2016-2107</td>
   1019    <td>A-28550804</td>
   1020    <td></td>
   1021    <td>*</td>
   1022    <td>4.4.4, 5.0.2, 5.1.1</td>
   1023    <td>2016 4 13</td>
   1024   </tr>
   1025 </table>
   1026 <p>*  Nexus      
   1027    .</p>
   1028 
   1029 <h3 id="denial-of-service-vulnerability-in-mediaserver">
   1030    (DoS) </h3>
   1031 <p>         
   1032       .  
   1033         .</p>
   1034 
   1035 <table>
   1036   <col width="19%">
   1037   <col width="19%">
   1038   <col width="10%">
   1039   <col width="16%">
   1040   <col width="17%">
   1041   <col width="17%">
   1042   <tr>
   1043    <th>CVE</th>
   1044    <th></th>
   1045    <th></th>
   1046    <th> Nexus </th>
   1047    <th> AOSP </th>
   1048    <th> </th>
   1049   </tr>
   1050   <tr>
   1051    <td>CVE-2016-3754</td>
   1052    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/6fdee2a83432b3b150d6a34f231c4e2f7353c01e">
   1053        A-28615448</a>
   1054        [<a href="https://android.googlesource.com/platform/frameworks/av/+/e7142a0703bc93f75e213e96ebc19000022afed9">2</a>]
   1055    </td>
   1056    <td></td>
   1057    <td><a href="#all_nexus"> Nexus</a></td>
   1058    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1059    <td>2016 5 5</td>
   1060   </tr>
   1061   <tr>
   1062    <td>CVE-2016-3755</td>
   1063    <td><a href="https://android.googlesource.com/platform/external/libavc/+/d4841f1161bdb5e13cb19e81af42437a634dd6ef">
   1064        A-28470138</a>
   1065    </td>
   1066    <td></td>
   1067    <td><a href="#all_nexus"> Nexus</a></td>
   1068    <td>6.0, 6.0.1</td>
   1069    <td>2016 4 29</td>
   1070   </tr>
   1071   <tr>
   1072    <td>CVE-2016-3756</td>
   1073    <td><a href="https://android.googlesource.com/platform/external/tremolo/+/659030a2e80c38fb8da0a4eb68695349eec6778b">
   1074        A-28556125</a>
   1075    </td>
   1076    <td></td>
   1077    <td><a href="#all_nexus"> Nexus</a></td>
   1078    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1079    <td>Google </td>
   1080   </tr>
   1081 </table>
   1082 
   1083 <h3 id="denial-of-service-vulnerability-in-libc">
   1084 libc  (DoS) </h3>
   1085 <p>libc        
   1086       .  
   1087        .</p>
   1088 
   1089 <table>
   1090   <col width="19%">
   1091   <col width="16%">
   1092   <col width="10%">
   1093   <col width="19%">
   1094   <col width="17%">
   1095   <col width="17%">
   1096   <tr>
   1097    <th>CVE</th>
   1098    <th></th>
   1099    <th></th>
   1100    <th> Nexus </th>
   1101    <th> AOSP </th>
   1102    <th> </th>
   1103   </tr>
   1104   <tr>
   1105    <td>CVE-2016-3818</td>
   1106    <td>A-28740702</td>
   1107    <td></td>
   1108    <td>*</td>
   1109    <td>4.4.4</td>
   1110    <td>Google </td>
   1111   </tr>
   1112 </table>
   1113 <p>*  Nexus      
   1114    .</p>
   1115 
   1116 <h3 id="elevation-of-privilege-vulnerability-in-lsof">
   1117 lsof   </h3>
   1118 <p>lsof    
   1119          
   1120   .        
   1121  .</p>
   1122 
   1123 <table>
   1124   <col width="19%">
   1125   <col width="16%">
   1126   <col width="10%">
   1127   <col width="19%">
   1128   <col width="18%">
   1129   <col width="16%">
   1130   <tr>
   1131    <th>CVE</th>
   1132    <th></th>
   1133    <th></th>
   1134    <th> Nexus </th>
   1135    <th> AOSP </th>
   1136    <th> </th>
   1137   </tr>
   1138   <tr>
   1139    <td>CVE-2016-3757</td>
   1140    <td><a href="https://android.googlesource.com/platform/system/core/+/ae18eb014609948a40e22192b87b10efc680daa7">
   1141        A-28175237</a>
   1142    </td>
   1143    <td></td>
   1144    <td><a href="#all_nexus"> Nexus</a></td>
   1145    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1146    <td>2016 4 11</td>
   1147   </tr>
   1148 </table>
   1149 
   1150 <h3 id="elevation-of-privilege-vulnerability-in-dexclassloader">
   1151 DexClassLoader   </h3>
   1152 <p>DexClassLoader       
   1153         
   1154 .        
   1155  .</p>
   1156 
   1157 <table>
   1158   <col width="19%">
   1159   <col width="16%">
   1160   <col width="10%">
   1161   <col width="19%">
   1162   <col width="17%">
   1163   <col width="17%">
   1164   <tr>
   1165    <th>CVE</th>
   1166    <th></th>
   1167    <th></th>
   1168    <th> Nexus </th>
   1169    <th> AOSP </th>
   1170    <th> </th>
   1171   </tr>
   1172   <tr>
   1173    <td>CVE-2016-3758</td>
   1174    <td><a href="https://android.googlesource.com/platform/dalvik/+/338aeaf28e9981c15d0673b18487dba61eb5447c">
   1175        A-27840771</a>
   1176    </td>
   1177    <td></td>
   1178    <td><a href="#all_nexus"> Nexus</a></td>
   1179    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1180    <td>Google </td>
   1181   </tr>
   1182 </table>
   1183 
   1184 <h3 id="elevation-of-privilege-vulnerability-in-framework-apis-2">
   1185  API   </h3>
   1186 <p> API      
   1187       
   1188   .    
   1189        
   1190     .</p>
   1191 
   1192 <table>
   1193   <col width="19%">
   1194   <col width="16%">
   1195   <col width="10%">
   1196   <col width="19%">
   1197   <col width="17%">
   1198   <col width="17%">
   1199   <tr>
   1200    <th>CVE</th>
   1201    <th></th>
   1202    <th></th>
   1203    <th> Nexus </th>
   1204    <th> AOSP </th>
   1205    <th> </th>
   1206   </tr>
   1207   <tr>
   1208    <td>CVE-2016-3759</td>
   1209    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/9b8c6d2df35455ce9e67907edded1e4a2ecb9e28">
   1210        A-28406080</a>
   1211    </td>
   1212    <td></td>
   1213    <td><a href="#all_nexus"> Nexus</a></td>
   1214    <td>5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1215    <td>Google </td>
   1216   </tr>
   1217 </table>
   1218 
   1219 <h3 id="elevation-of-privilege-vulnerability-in-bluetooth">
   1220    </h3>
   1221 <p>       
   1222        
   1223 .        
   1224        .</p>
   1225 
   1226 <table>
   1227   <col width="19%">
   1228   <col width="16%">
   1229   <col width="10%">
   1230   <col width="19%">
   1231   <col width="18%">
   1232   <col width="16%">
   1233   <tr>
   1234    <th>CVE</th>
   1235    <th></th>
   1236    <th></th>
   1237    <th> Nexus </th>
   1238    <th> AOSP </th>
   1239    <th> </th>
   1240   </tr>
   1241   <tr>
   1242    <td>CVE-2016-3760</td>
   1243    <td><a href="https://android.googlesource.com/platform/hardware/libhardware/+/8b3d5a64c3c8d010ad4517f652731f09107ae9c5">A-27410683</a>
   1244 [<a href="https://android.googlesource.com/platform/system/bt/+/37c88107679d36c419572732b4af6e18bb2f7dce">2</a>]
   1245 [<a href="https://android.googlesource.com/platform/packages/apps/Bluetooth/+/122feb9a0b04290f55183ff2f0384c6c53756bd8">3</a>]
   1246    </td>
   1247    <td></td>
   1248    <td><a href="#all_nexus"> Nexus</a></td>
   1249    <td>5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1250    <td>2016 2 29</td>
   1251   </tr>
   1252 </table>
   1253 
   1254 <h3 id="elevation-of-privilege-vulnerability-in-nfc">
   1255 NFC   </h3>
   1256 <p>NFC        
   1257      .  
   1258           
   1259   .</p>
   1260 
   1261 <table>
   1262   <col width="19%">
   1263   <col width="16%">
   1264   <col width="10%">
   1265   <col width="19%">
   1266   <col width="18%">
   1267   <col width="16%">
   1268   <tr>
   1269    <th>CVE</th>
   1270    <th></th>
   1271    <th></th>
   1272    <th> Nexus </th>
   1273    <th> AOSP </th>
   1274    <th> </th>
   1275   </tr>
   1276   <tr>
   1277    <td>CVE-2016-3761</td>
   1278    <td><a href="https://android.googlesource.com/platform/packages/apps/Nfc/+/9ea802b5456a36f1115549b645b65c791eff3c2c">
   1279        A-28300969</a>
   1280    </td>
   1281    <td></td>
   1282    <td><a href="#all_nexus"> Nexus</a></td>
   1283    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1284    <td>2016 4 20</td>
   1285   </tr>
   1286 </table>
   1287 
   1288 <h3 id="elevation-of-privilege-vulnerability-in-sockets-2">
   1289    </h3>
   1290 <p>       
   1291         
   1292     .   
   1293            
   1294   .</p>
   1295 
   1296 <table>
   1297   <col width="19%">
   1298   <col width="16%">
   1299   <col width="10%">
   1300   <col width="19%">
   1301   <col width="18%">
   1302   <col width="16%">
   1303   <tr>
   1304    <th>CVE</th>
   1305    <th></th>
   1306    <th></th>
   1307    <th> Nexus </th>
   1308    <th> AOSP </th>
   1309    <th> </th>
   1310   </tr>
   1311   <tr>
   1312    <td>CVE-2016-3762</td>
   1313    <td><a href="https://android.googlesource.com/platform/external/sepolicy/+/abf0663ed884af7bc880a05e9529e6671eb58f39">
   1314        A-28612709</a>
   1315    </td>
   1316    <td></td>
   1317    <td><a href="#all_nexus"> Nexus</a></td>
   1318    <td>5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1319    <td>2016 4 21</td>
   1320   </tr>
   1321 </table>
   1322 
   1323 <h3 id="information-disclosure-vulnerability-in-proxy-auto-config">
   1324      </h3>
   1325 <p>         
   1326        .             .</p>
   1327 
   1328 <table>
   1329   <col width="19%">
   1330   <col width="16%">
   1331   <col width="10%">
   1332   <col width="19%">
   1333   <col width="18%">
   1334   <col width="16%">
   1335   <tr>
   1336    <th>CVE</th>
   1337    <th></th>
   1338    <th></th>
   1339    <th> Nexus </th>
   1340    <th> AOSP </th>
   1341    <th> </th>
   1342   </tr>
   1343   <tr>
   1344    <td>CVE-2016-3763</td>
   1345    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/ec2fc50d202d975447211012997fe425496c849c">
   1346        A-27593919</a>
   1347    </td>
   1348    <td></td>
   1349    <td><a href="#all_nexus"> Nexus</a></td>
   1350    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1351    <td>2016 3 10</td>
   1352   </tr>
   1353 </table>
   1354 
   1355 <h3 id="information-disclosure-vulnerability-in-mediaserver-2">
   1356     </h3>
   1357 <p>          
   1358   .         
   1359    .</p>
   1360 
   1361 <table>
   1362   <col width="19%">
   1363   <col width="16%">
   1364   <col width="10%">
   1365   <col width="19%">
   1366   <col width="18%">
   1367   <col width="16%">
   1368   <tr>
   1369    <th>CVE</th>
   1370    <th></th>
   1371    <th></th>
   1372    <th> Nexus </th>
   1373    <th> AOSP </th>
   1374    <th> </th>
   1375   </tr>
   1376   <tr>
   1377    <td>CVE-2016-3764</td>
   1378    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/daef4327fe0c75b0a90bb8627458feec7a301e1f">
   1379        A-28377502</a>
   1380    </td>
   1381    <td></td>
   1382    <td><a href="#all_nexus"> Nexus</a></td>
   1383    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1384    <td>2016 4 25</td>
   1385   </tr>
   1386   <tr>
   1387    <td>CVE-2016-3765</td>
   1388    <td><a href="https://android.googlesource.com/platform/external/libmpeg2/+/d1c775d1d8d2ed117d1e026719b7f9f089716597">
   1389        A-28168413</a>
   1390    </td>
   1391    <td></td>
   1392    <td><a href="#all_nexus"> Nexus</a></td>
   1393    <td>6.0, 6.0.1</td>
   1394    <td>2016 4 8</td>
   1395   </tr>
   1396 </table>
   1397 
   1398 <h3 id="denial-of-service-vulnerability-in-mediaserver-2">
   1399    (DoS) </h3>
   1400 <p>         
   1401       .  
   1402        .</p>
   1403 
   1404 <table>
   1405   <col width="19%">
   1406   <col width="16%">
   1407   <col width="10%">
   1408   <col width="19%">
   1409   <col width="18%">
   1410   <col width="16%">
   1411   <tr>
   1412    <th>CVE</th>
   1413    <th></th>
   1414    <th></th>
   1415    <th> Nexus </th>
   1416    <th> AOSP </th>
   1417    <th> </th>
   1418   </tr>
   1419   <tr>
   1420    <td>CVE-2016-3766</td>
   1421    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/6fdee2a83432b3b150d6a34f231c4e2f7353c01e">
   1422        A-28471206</a>
   1423        [<a href="https://android.googlesource.com/platform/frameworks/av/+/e7142a0703bc93f75e213e96ebc19000022afed9">2</a>]
   1424    </td>
   1425    <td></td>
   1426    <td><a href="#all_nexus"> Nexus</a></td>
   1427    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1428    <td>2016 4 29</td>
   1429   </tr>
   1430 </table>
   1431 
   1432 <h2 id="2016-07-05_details">2016-07-05    </h2>
   1433 <p>   <a href="2016-07-05_summary">2016-07-05   
   1434  </a>    
   1435 .   ,   
   1436 CVE,  , ,  Nexus ,
   1437  AOSP ( ),      .  
   1438 AOSP         ID
   1439 .        
   1440   ID    .</p>
   1441 
   1442 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-gpu-driver">
   1443 Qualcomm GPU    </h3>
   1444 <p>Qualcomm GPU     
   1445        
   1446   .   
   1447         ,
   1448         .</p>
   1449 
   1450 <table>
   1451   <col width="19%">
   1452   <col width="16%">
   1453   <col width="10%">
   1454   <col width="27%">
   1455   <col width="16%">
   1456   <tr>
   1457    <th>CVE</th>
   1458    <th></th>
   1459    <th></th>
   1460    <th> Nexus </th>
   1461    <th> </th>
   1462   </tr>
   1463   <tr>
   1464    <td>CVE-2016-2503</td>
   1465    <td>A-28084795*
   1466       QC-CR1006067</td>
   1467    <td></td>
   1468    <td>Nexus 5X, Nexus 6P</td>
   1469    <td>2016 4 5</td>
   1470   </tr>
   1471   <tr>
   1472    <td>CVE-2016-2067</td>
   1473    <td>A-28305757
   1474       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.18/commit/?id=410cfa95f0a1cf58819cbfbd896f9aa45b004ac0">
   1475       QC-CR988993</a></td>
   1476    <td></td>
   1477    <td>Nexus 5X, Nexus 6, Nexus 6P</td>
   1478    <td>2016 4 20</td>
   1479   </tr>
   1480 </table>
   1481 <p>*         . 
   1482 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1483   .</p>
   1484 
   1485 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-wi-fi-driver">
   1486 MediaTek Wi-Fi    </h3>
   1487 <p>MediaTek Wi-Fi        
   1488        .   
   1489         ,
   1490         .</p>
   1491 
   1492 <table>
   1493   <col width="19%">
   1494   <col width="20%">
   1495   <col width="10%">
   1496   <col width="23%">
   1497   <col width="16%">
   1498   <tr>
   1499    <th>CVE</th>
   1500    <th></th>
   1501    <th></th>
   1502    <th> Nexus </th>
   1503    <th> </th>
   1504   </tr>
   1505   <tr>
   1506    <td>CVE-2016-3767</td>
   1507    <td>A-28169363*
   1508        <br>M-ALPS02689526</td>
   1509    <td></td>
   1510    <td>Android One</td>
   1511    <td>2016 4 6</td>
   1512   </tr>
   1513 </table>
   1514 <p>*         . 
   1515 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1516   .</p>
   1517 
   1518 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-performance-component">
   1519 Qualcomm     </h3>
   1520 <p>Qualcomm      
   1521        
   1522   .   
   1523         ,
   1524         .</p>
   1525 
   1526 <table>
   1527   <col width="19%">
   1528   <col width="16%">
   1529   <col width="10%">
   1530   <col width="27%">
   1531   <col width="16%">
   1532   <tr>
   1533    <th>CVE</th>
   1534    <th></th>
   1535    <th></th>
   1536    <th> Nexus </th>
   1537    <th> </th>
   1538   </tr>
   1539   <tr>
   1540    <td>CVE-2016-3768</td>
   1541    <td>A-28172137*
   1542        QC-CR1010644</td>
   1543    <td></td>
   1544    <td>Nexus 5, Nexus 6, Nexus 5X, Nexus 6P, Nexus 7(2013)</td>
   1545    <td>2016 4 9</td>
   1546   </tr>
   1547 </table>
   1548 <p>*         . 
   1549 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1550   .</p>
   1551 
   1552 <h3 id="elevation-of-privilege-vulnerability-in-nvidia-video-driver">
   1553 NVIDIA     </h3>
   1554 <p>NVIDIA      
   1555        
   1556   .   
   1557         ,
   1558         .</p>
   1559 
   1560 <table>
   1561   <col width="19%">
   1562   <col width="20%">
   1563   <col width="10%">
   1564   <col width="23%">
   1565   <col width="16%">
   1566   <tr>
   1567    <th>CVE</th>
   1568    <th></th>
   1569    <th></th>
   1570    <th> Nexus </th>
   1571    <th> </th>
   1572   </tr>
   1573   <tr>
   1574    <td>CVE-2016-3769</td>
   1575    <td>A-28376656*<br>
   1576        N-CVE20163769</td>
   1577    <td></td>
   1578    <td>Nexus 9</td>
   1579    <td>2016 4 18</td>
   1580   </tr>
   1581 </table>
   1582 <p>*       . 
   1583 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1584   .</p>
   1585 
   1586 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-drivers-device-specific">
   1587 MediaTek    ( )</h3>
   1588 <p> MediaTek       
   1589        
   1590 .   
   1591         ,
   1592         .</p>
   1593 
   1594 <table>
   1595   <col width="19%">
   1596   <col width="20%">
   1597   <col width="10%">
   1598   <col width="23%">
   1599   <col width="16%">
   1600   <tr>
   1601    <th>CVE</th>
   1602    <th></th>
   1603    <th></th>
   1604    <th> Nexus </th>
   1605    <th> </th>
   1606   </tr>
   1607   <tr>
   1608    <td>CVE-2016-3770</td>
   1609    <td>A-28346752*<br>
   1610        M-ALPS02703102</td>
   1611    <td></td>
   1612    <td>Android One</td>
   1613    <td>2016 4 22</td>
   1614   </tr>
   1615   <tr>
   1616    <td>CVE-2016-3771</td>
   1617    <td>A-29007611*<br>
   1618        M-ALPS02703102</td>
   1619    <td></td>
   1620    <td>Android One</td>
   1621    <td>2016 4 22</td>
   1622   </tr>
   1623   <tr>
   1624    <td>CVE-2016-3772</td>
   1625    <td>A-29008188*<br>
   1626        M-ALPS02703102</td>
   1627    <td></td>
   1628    <td>Android One</td>
   1629    <td>2016 4 22</td>
   1630   </tr>
   1631   <tr>
   1632    <td>CVE-2016-3773</td>
   1633    <td>A-29008363*<br>
   1634        M-ALPS02703102</td>
   1635    <td></td>
   1636    <td>Android One</td>
   1637    <td>2016 4 22</td>
   1638   </tr>
   1639   <tr>
   1640    <td>CVE-2016-3774</td>
   1641    <td>A-29008609*<br>
   1642        M-ALPS02703102</td>
   1643    <td></td>
   1644    <td>Android One</td>
   1645    <td>2016 4 22</td>
   1646   </tr>
   1647 </table>
   1648 <p>*       . 
   1649 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1650   .</p>
   1651 
   1652 <h3 id="elevation-of-privilege-vulnerability-in-kernel-file-system">
   1653      </h3>
   1654 <p>         
   1655       
   1656 .   
   1657         ,
   1658         .</p>
   1659 
   1660 <table>
   1661   <col width="19%">
   1662   <col width="16%">
   1663   <col width="10%">
   1664   <col width="27%">
   1665   <col width="16%">
   1666   <tr>
   1667    <th>CVE</th>
   1668    <th></th>
   1669    <th></th>
   1670    <th> Nexus </th>
   1671    <th> </th>
   1672   </tr>
   1673   <tr>
   1674    <td>CVE-2016-3775</td>
   1675    <td>A-28588279*</td>
   1676    <td></td>
   1677    <td>Nexus 5X, Nexus 6, Nexus 6P  Nexus Player, Pixel C</td>
   1678    <td>2016 5 4</td>
   1679   </tr>
   1680 </table>
   1681 <p>*       . 
   1682 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1683   .</p>
   1684 
   1685 <h3 id="elevation-of-privilege-vulnerability-in-usb-driver">
   1686 USB    </h3>
   1687 <p>USB     
   1688        
   1689   .   
   1690         ,
   1691         .</p>
   1692 
   1693 <table>
   1694   <col width="19%">
   1695   <col width="16%">
   1696   <col width="10%">
   1697   <col width="27%">
   1698   <col width="16%">
   1699   <tr>
   1700    <th>CVE</th>
   1701    <th></th>
   1702    <th></th>
   1703    <th> Nexus </th>
   1704    <th> </th>
   1705   </tr>
   1706   <tr>
   1707    <td>CVE-2015-8816</td>
   1708    <td>A-28712303*</td>
   1709    <td></td>
   1710    <td>Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013), Nexus 9, Nexus Player, Pixel C</td>
   1711    <td>2016 5 4</td>
   1712   </tr>
   1713 </table>
   1714 <p>*       . 
   1715 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1716   .</p>
   1717 
   1718 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-components">
   1719 Qualcomm    </h3>
   1720 <p>  ,  ,  , ,
   1721       Qualcomm 
   1722      .</p>
   1723 <p>        
   1724        
   1725 ,     
   1726    .</p>
   1727 
   1728 <table>
   1729   <col width="19%">
   1730   <col width="20%">
   1731   <col width="10%">
   1732   <col width="23%">
   1733   <col width="16%">
   1734   <tr>
   1735    <th>CVE</th>
   1736    <th></th>
   1737    <th>*</th>
   1738    <th> Nexus </th>
   1739    <th> </th>
   1740   </tr>
   1741   <tr>
   1742    <td>CVE-2014-9795</td>
   1743    <td>A-28820720<br>
   1744       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=ce2a0ea1f14298abc83729f3a095adab43342342">QC-CR681957</a>
   1745       [<a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=fc3b31f81a1c128c2bcc745564a075022cd72a2e">2</a>]
   1746    </td>
   1747    <td></td>
   1748    <td>Nexus 5</td>
   1749    <td>2014 8 8</td>
   1750   </tr>
   1751   <tr>
   1752    <td>CVE-2014-9794</td>
   1753    <td>A-28821172<br>
   1754       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=f39085971c8c4e36cadbf8a72aabe6c7ff538ffa">QC-CR646385</a>
   1755    </td>
   1756    <td></td>
   1757    <td>Nexus 7(2013)</td>
   1758    <td>2014 8 8</td>
   1759   </tr>
   1760   <tr>
   1761    <td>CVE-2015-8892</td>
   1762    <td>A-28822807<br>
   1763       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=fae606b9dd92c021e2419369975264f24f60db23">QC-CR902998</a>
   1764    </td>
   1765    <td></td>
   1766    <td>Nexus 5X, Nexus 6P</td>
   1767    <td>2015 12 30</td>
   1768   </tr>
   1769   <tr>
   1770    <td>CVE-2014-9781</td>
   1771    <td>A-28410333<br>
   1772       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/video/?h=LA.BF.1.1.3_rb1.12&id=a2b5237ad265ec634489c8b296d870827b2a1b13&context=20&ignorews=0&dt=0">QC-CR556471</a>
   1773    </td>
   1774    <td></td>
   1775    <td>Nexus 7(2013)</td>
   1776    <td>2014 2 6</td>
   1777   </tr>
   1778   <tr>
   1779    <td>CVE-2014-9786</td>
   1780    <td>A-28557260<br>
   1781       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/patch/?id=2fb303d9c6ca080f253b10ed9384293ca69ad32b">QC-CR545979</a></td>
   1782    <td></td>
   1783    <td>Nexus 5, Nexus 7(2013)</td>
   1784    <td>2014 3 13</td>
   1785   </tr>
   1786   <tr>
   1787    <td>CVE-2014-9788</td>
   1788    <td>A-28573112<br>
   1789       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=73bfc22aa70cc0b7e6709381125a0a42aa72a4f2">QC-CR548872</a></td>
   1790    <td></td>
   1791    <td>Nexus 5</td>
   1792    <td>2014 3 13</td>
   1793   </tr>
   1794   <tr>
   1795    <td>CVE-2014-9779</td>
   1796    <td>A-28598347<br>
   1797       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c?h=LA.BF.1.1.3_rb1.12&id=0b5f49b360afdebf8ef55df1e48ec141b3629621">QC-CR548679</a></td>
   1798    <td></td>
   1799    <td>Nexus 5</td>
   1800    <td>2014 3 13</td>
   1801   </tr>
   1802   <tr>
   1803    <td>CVE-2014-9780</td>
   1804    <td>A-28602014<br>
   1805       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=b5bb13e1f738f90df11e0c17f843c73999a84a54">QC-CR542222</a></td>
   1806    <td></td>
   1807    <td>Nexus 5, Nexus 5X, Nexus 6P</td>
   1808    <td>2014 3 13</td>
   1809   </tr>
   1810   <tr>
   1811    <td>CVE-2014-9789</td>
   1812    <td>A-28749392<br>
   1813       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=5720ed5c3a786e3ba0a2428ac45da5d7ec996b4e">QC-CR556425</a></td>
   1814    <td></td>
   1815    <td>Nexus 5</td>
   1816    <td>2014 3 13</td>
   1817   </tr>
   1818   <tr>
   1819    <td>CVE-2014-9793</td>
   1820    <td>A-28821253<br>
   1821       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=0dcccecc4a6a9a9b3314cb87b2be8b52df1b7a81">QC-CR580567</a></td>
   1822    <td></td>
   1823    <td>Nexus 7(2013)</td>
   1824    <td>2014 3 13</td>
   1825   </tr>
   1826   <tr>
   1827    <td>CVE-2014-9782</td>
   1828    <td>A-28431531<br>
   1829       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/patch/?id=2e57a46ab2ba7299d99d9cdc1382bd1e612963fb">QC-CR511349</a></td>
   1830    <td></td>
   1831    <td>Nexus 5, Nexus 7(2013)</td>
   1832    <td>2014 3 31</td>
   1833   </tr>
   1834   <tr>
   1835    <td>CVE-2014-9783</td>
   1836    <td>A-28441831<br>
   1837       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=2b1050b49a9a5f7bb57006648d145e001a3eaa8b">QC-CR511382</a>
   1838       [<a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=a7502f4f801bb95bff73617309835bb7a016cde5">2</a>]</td>
   1839    <td></td>
   1840    <td>Nexus 7(2013)</td>
   1841    <td>2014 3 31</td>
   1842   </tr>
   1843   <tr>
   1844    <td>CVE-2014-9785</td>
   1845    <td>A-28469042<br>
   1846       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=b4338420db61f029ca6713a89c41b3a5852b20ce">QC-CR545747</a></td>
   1847    <td></td>
   1848    <td>Nexus 7(2013)</td>
   1849    <td>2014 3 31</td>
   1850   </tr>
   1851   <tr>
   1852    <td>CVE-2014-9787</td>
   1853    <td>A-28571496<br>
   1854       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=528400ae4cba715f6c9ff4a2657dafd913f30b8b">QC-CR545764</a></td>
   1855    <td></td>
   1856    <td>Nexus 7(2013)</td>
   1857    <td>2014 3 31</td>
   1858   </tr>
   1859   <tr>
   1860    <td>CVE-2014-9784</td>
   1861    <td>A-28442449<br>
   1862       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=36503d639cedcc73880974ed92132247576e72ba">QC-CR585147</a></td>
   1863    <td></td>
   1864    <td>Nexus 5, Nexus 7(2013)</td>
   1865    <td>2014 4 30</td>
   1866   </tr>
   1867   <tr>
   1868    <td>CVE-2014-9777</td>
   1869    <td>A-28598501<br>
   1870       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=17bfaf64ad503d2e6607d2d3e0956f25bf07eb43">QC-CR563654</a></td>
   1871    <td></td>
   1872    <td>Nexus 5, Nexus 7(2013)</td>
   1873    <td>2014 4 30</td>
   1874   </tr>
   1875   <tr>
   1876    <td>CVE-2014-9778</td>
   1877    <td>A-28598515<br>
   1878       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=af85054aa6a1bcd38be2354921f2f80aef1440e5">QC-CR563694</a></td>
   1879    <td></td>
   1880    <td>Nexus 5, Nexus 7(2013)</td>
   1881    <td>2014 4 30</td>
   1882   </tr>
   1883   <tr>
   1884    <td>CVE-2014-9790</td>
   1885    <td>A-28769136<br>
   1886       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?h=LA.BF.1.1.3_rb1.12&id=6ed921bda8cbb505e8654dfc1095185b0bccc38e">QC-CR545716</a>
   1887       [<a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit?h=LA.BF.1.1.3_rb1.12&id=9bc30c0d1832f7dd5b6fa10d5e48a29025176569">2</a>]</td>
   1888    <td></td>
   1889    <td>Nexus 5, Nexus 7(2013)</td>
   1890    <td>2014 4 30</td>
   1891   </tr>
   1892   <tr>
   1893    <td>CVE-2014-9792</td>
   1894    <td>A-28769399<br>
   1895       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=a3e3dd9fc0a2699ae053ffd3efb52cdc73ad94cd">QC-CR550606</a></td>
   1896    <td></td>
   1897    <td>Nexus 5</td>
   1898    <td>2014 4 30</td>
   1899   </tr>
   1900   <tr>
   1901    <td>CVE-2014-9797</td>
   1902    <td>A-28821090<br>
   1903       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=3312737f3e1ec84dd67ee0622c7dd031083f71a4">QC-CR674071</a></td>
   1904    <td></td>
   1905    <td>Nexus 5</td>
   1906    <td>2014 7 3</td>
   1907   </tr>
   1908   <tr>
   1909    <td>CVE-2014-9791</td>
   1910    <td>A-28803396<br>
   1911       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?h=LA.BF.1.1.3_rb1.12&id=9aabfc9e7775abbbcf534cdecccc4f12ee423b27">QC-CR659364</a></td>
   1912    <td></td>
   1913    <td>Nexus 7(2013)</td>
   1914    <td>2014 8 29</td>
   1915   </tr>
   1916   <tr>
   1917    <td>CVE-2014-9796</td>
   1918    <td>A-28820722<br>
   1919       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=2e21b3a57cac7fb876bcf43244d7cc3dc1f6030d">QC-CR684756</a></td>
   1920    <td></td>
   1921    <td>Nexus 5, Nexus 7(2013)</td>
   1922    <td>2014 9 30</td>
   1923   </tr>
   1924   <tr>
   1925    <td>CVE-2014-9800</td>
   1926    <td>A-28822150<br>
   1927       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=6390f200d966dc13cf61bb5abbe3110447ca82b5">QC-CR692478</a></td>
   1928    <td></td>
   1929    <td>Nexus 5, Nexus 7(2013)</td>
   1930    <td>2014 10 31</td>
   1931   </tr>
   1932   <tr>
   1933    <td>CVE-2014-9799</td>
   1934    <td>A-28821731<br>
   1935       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=c2119f1fba46f3b6e153aa018f15ee46fe6d5b76">QC-CR691916</a></td>
   1936    <td></td>
   1937    <td>Nexus 5, Nexus 7(2013)</td>
   1938    <td>2014 10 31</td>
   1939   </tr>
   1940   <tr>
   1941    <td>CVE-2014-9801</td>
   1942    <td>A-28822060<br>
   1943       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=cf8f5a105bafda906ccb7f149d1a5b8564ce20c0">QC-CR705078</a></td>
   1944    <td></td>
   1945    <td>Nexus 5</td>
   1946    <td>2014 11 28</td>
   1947   </tr>
   1948   <tr>
   1949    <td>CVE-2014-9802</td>
   1950    <td>A-28821965<br>
   1951       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=222e0ec9bc755bfeaa74f9a0052b7c709a4ad054">QC-CR705108</a></td>
   1952    <td></td>
   1953    <td>Nexus 5, Nexus 7(2013)</td>
   1954    <td>2014 12 31</td>
   1955   </tr>
   1956   <tr>
   1957    <td>CVE-2015-8891</td>
   1958    <td>A-28842418<br>
   1959       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=4f829bb52d0338c87bc6fbd0414b258f55cc7c62">QC-CR813930</a></td>
   1960    <td></td>
   1961    <td>Nexus 5, Nexus 7(2013)</td>
   1962    <td>2015 5 29</td>
   1963   </tr>
   1964   <tr>
   1965    <td>CVE-2015-8888</td>
   1966    <td>A-28822465<br>
   1967       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=1321f34f1ebcff61ad7e65e507cfd3e9028af19b">QC-CR813933</a></td>
   1968    <td></td>
   1969    <td>Nexus 5</td>
   1970    <td>2015 6 30</td>
   1971   </tr>
   1972   <tr>
   1973    <td>CVE-2015-8889</td>
   1974    <td>A-28822677<br>
   1975       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=fa774e023554427ee14d7a49181e9d4afbec035e">QC-CR804067</a></td>
   1976    <td></td>
   1977    <td>Nexus 6P</td>
   1978    <td>2015 6 30</td>
   1979   </tr>
   1980   <tr>
   1981    <td>CVE-2015-8890</td>
   1982    <td>A-28822878<br>
   1983       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=e22aca36da2bb6f5016f3c885eb8c8ff85c115e4">QC-CR823461</a></td>
   1984    <td></td>
   1985    <td>Nexus 5, Nexus 7(2013)</td>
   1986    <td>2015 8 19</td>
   1987   </tr>
   1988 </table>
   1989 <p>*     Qualcomm  .</p>
   1990 
   1991 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-usb-driver">
   1992 Qualcomm USB    </h3>
   1993 <p>Qualcomm USB     
   1994        
   1995   .        
   1996    .</p>
   1997 
   1998 <table>
   1999   <col width="19%">
   2000   <col width="16%">
   2001   <col width="10%">
   2002   <col width="27%">
   2003   <col width="16%">
   2004   <tr>
   2005    <th>CVE</th>
   2006    <th></th>
   2007    <th></th>
   2008    <th> Nexus </th>
   2009    <th> </th>
   2010   </tr>
   2011   <tr>
   2012    <td>CVE-2016-2502</td>
   2013    <td>A-27657963
   2014       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=0bc45d7712eabe315ce8299a49d16433c3801156">QC-CR997044</a></td>
   2015    <td></td>
   2016    <td>Nexus 5X, Nexus 6P</td>
   2017    <td>2016 3 11</td>
   2018   </tr>
   2019 </table>
   2020 
   2021 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-wi-fi-driver">
   2022 Qualcomm Wi-Fi    </h3>
   2023 <p>Qualcomm Wi-Fi     
   2024          
   2025 .        
   2026    .</p>
   2027 
   2028 <table>
   2029   <col width="19%">
   2030   <col width="16%">
   2031   <col width="10%">
   2032   <col width="27%">
   2033   <col width="16%">
   2034   <tr>
   2035    <th>CVE</th>
   2036    <th></th>
   2037    <th></th>
   2038    <th> Nexus </th>
   2039    <th> </th>
   2040   </tr>
   2041   <tr>
   2042    <td>CVE-2016-3792</td>
   2043    <td>A-27725204
   2044       <a href="https://us.codeaurora.org/cgit/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=28d4f0c1f712bffb4aa5b47f06e97d5a9fa06d29">QC-CR561022</a></td>
   2045    <td></td>
   2046    <td>Nexus 7(2013)</td>
   2047    <td>2016 3 17</td>
   2048   </tr>
   2049 </table>
   2050 
   2051 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-camera-driver">
   2052 Qualcomm     </h3>
   2053 <p>Qualcomm      
   2054        
   2055   .        
   2056    .</p>
   2057 
   2058 <table>
   2059   <col width="19%">
   2060   <col width="16%">
   2061   <col width="10%">
   2062   <col width="27%">
   2063   <col width="16%">
   2064   <tr>
   2065    <th>CVE</th>
   2066    <th></th>
   2067    <th></th>
   2068    <th> Nexus </th>
   2069    <th> </th>
   2070   </tr>
   2071   <tr>
   2072    <td>CVE-2016-2501</td>
   2073    <td>A-27890772*
   2074        QC-CR1001092</td>
   2075    <td></td>
   2076    <td>Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013)</td>
   2077    <td>2016 3 27</td>
   2078   </tr>
   2079 </table>
   2080 <p>*       . 
   2081 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2082   .</p>
   2083 
   2084 <h3 id="elevation-of-privilege-vulnerability-in-nvidia-camera-driver">
   2085 NVIDIA     </h3>
   2086 <p>NVIDIA      
   2087        
   2088   .        
   2089    .</p>
   2090 
   2091 <table>
   2092   <col width="19%">
   2093   <col width="20%">
   2094   <col width="10%">
   2095   <col width="23%">
   2096   <col width="16%">
   2097   <tr>
   2098    <th>CVE</th>
   2099    <th></th>
   2100    <th></th>
   2101    <th> Nexus </th>
   2102    <th> </th>
   2103   </tr>
   2104   <tr>
   2105    <td>CVE-2016-3793</td>
   2106    <td>A-28026625*<br>
   2107        N-CVE20163793</td>
   2108    <td></td>
   2109    <td>Nexus 9</td>
   2110    <td>2016 4 5</td>
   2111   </tr>
   2112 </table>
   2113 <p>*       . 
   2114 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2115   .</p>
   2116 
   2117 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-power-driver">
   2118 MediaTek     </h3>
   2119 <p>MediaTek      
   2120       
   2121    .        
   2122    .</p>
   2123 
   2124 <table>
   2125   <col width="19%">
   2126   <col width="20%">
   2127   <col width="10%">
   2128   <col width="23%">
   2129   <col width="16%">
   2130   <tr>
   2131    <th>CVE</th>
   2132    <th></th>
   2133    <th></th>
   2134    <th> Nexus </th>
   2135    <th> </th>
   2136   </tr>
   2137   <tr>
   2138    <td>CVE-2016-3795</td>
   2139    <td>A-28085222*<br>
   2140        M-ALPS02677244</td>
   2141    <td></td>
   2142    <td>Android One</td>
   2143    <td>2016 4 7</td>
   2144   </tr>
   2145   <tr>
   2146    <td>CVE-2016-3796</td>
   2147    <td>A-29008443*<br>
   2148        M-ALPS02677244</td>
   2149    <td></td>
   2150    <td>Android One</td>
   2151    <td>2016 4 7</td>
   2152   </tr>
   2153 </table>
   2154 <p>*       . 
   2155 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2156   .</p>
   2157 
   2158 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-wi-fi-driver-2">
   2159 Qualcomm Wi-Fi    </h3>
   2160 <p>Qualcomm Wi-Fi     
   2161          
   2162 .        
   2163    .</p>
   2164 
   2165 <table>
   2166   <col width="19%">
   2167   <col width="16%">
   2168   <col width="10%">
   2169   <col width="27%">
   2170   <col width="16%">
   2171   <tr>
   2172    <th>CVE</th>
   2173    <th></th>
   2174    <th></th>
   2175    <th> Nexus </th>
   2176    <th> </th>
   2177   </tr>
   2178   <tr>
   2179    <td>CVE-2016-3797</td>
   2180    <td>A-28085680*
   2181        QC-CR1001450</td>
   2182    <td></td>
   2183    <td>Nexus 5X</td>
   2184    <td>2016 4 7</td>
   2185   </tr>
   2186 </table>
   2187 <p>*       . 
   2188 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2189   .</p>
   2190 
   2191 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-hardware-sensor-driver">
   2192 MediaTek      </h3>
   2193 <p>MediaTek       
   2194        
   2195   .        
   2196    .</p>
   2197 
   2198 <table>
   2199   <col width="19%">
   2200   <col width="20%">
   2201   <col width="10%">
   2202   <col width="23%">
   2203   <col width="16%">
   2204   <tr>
   2205    <th>CVE</th>
   2206    <th></th>
   2207    <th></th>
   2208    <th> Nexus </th>
   2209    <th> </th>
   2210   </tr>
   2211   <tr>
   2212    <td>CVE-2016-3798</td>
   2213    <td>A-28174490*<br>
   2214        M-ALPS02703105</td>
   2215    <td></td>
   2216    <td>Android One</td>
   2217    <td>2016 4 11</td>
   2218   </tr>
   2219 </table>
   2220 <p>*       . 
   2221 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2222   .</p>
   2223 
   2224 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-video-driver">
   2225 MediaTek     </h3>
   2226 <p>MediaTek      
   2227        
   2228   .        
   2229    .</p>
   2230 
   2231 <table>
   2232   <col width="19%">
   2233   <col width="20%">
   2234   <col width="10%">
   2235   <col width="23%">
   2236   <col width="16%">
   2237   <tr>
   2238    <th>CVE</th>
   2239    <th></th>
   2240    <th></th>
   2241    <th> Nexus </th>
   2242    <th> </th>
   2243   </tr>
   2244   <tr>
   2245    <td>CVE-2016-3799</td>
   2246    <td>A-28175025*<br>
   2247        M-ALPS02693738</td>
   2248    <td></td>
   2249    <td>Android One</td>
   2250    <td>2016 4 11</td>
   2251   </tr>
   2252   <tr>
   2253    <td>CVE-2016-3800</td>
   2254    <td>A-28175027*<br>
   2255        M-ALPS02693739</td>
   2256    <td></td>
   2257    <td>Android One</td>
   2258    <td>2016 4 11</td>
   2259   </tr>
   2260 </table>
   2261 <p>*       . 
   2262 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2263   .</p>
   2264 
   2265 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-gps-driver">
   2266 MediaTek GPS    </h3>
   2267 <p>MediaTek GPS     
   2268        
   2269   .        
   2270    .</p>
   2271 
   2272 <table>
   2273   <col width="19%">
   2274   <col width="20%">
   2275   <col width="10%">
   2276   <col width="23%">
   2277   <col width="16%">
   2278   <tr>
   2279    <th>CVE</th>
   2280    <th></th>
   2281    <th></th>
   2282    <th> Nexus </th>
   2283    <th> </th>
   2284   </tr>
   2285   <tr>
   2286    <td>CVE-2016-3801</td>
   2287    <td>A-28174914*<br>
   2288        M-ALPS02688853</td>
   2289    <td></td>
   2290    <td>Android One</td>
   2291    <td>2016 4 11</td>
   2292   </tr>
   2293 </table>
   2294 <p>*       . 
   2295 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2296   .</p>
   2297 
   2298 <h3 id="elevation-of-privilege-vulnerability-in-kernel-file-system-2">
   2299      </h3>
   2300 <p>         
   2301       
   2302 .        
   2303    .</p>
   2304 
   2305 <table>
   2306   <col width="19%">
   2307   <col width="16%">
   2308   <col width="10%">
   2309   <col width="27%">
   2310   <col width="16%">
   2311   <tr>
   2312    <th>CVE</th>
   2313    <th></th>
   2314    <th></th>
   2315    <th> Nexus </th>
   2316    <th> </th>
   2317   </tr>
   2318   <tr>
   2319    <td>CVE-2016-3802</td>
   2320    <td>A-28271368*</td>
   2321    <td></td>
   2322    <td>Nexus 9</td>
   2323    <td>2016 4 19</td>
   2324   </tr>
   2325   <tr>
   2326    <td>CVE-2016-3803</td>
   2327    <td>A-28588434*</td>
   2328    <td></td>
   2329    <td>Nexus 5X, Nexus 6P</td>
   2330    <td>2016 5 4</td>
   2331   </tr>
   2332 </table>
   2333 <p>*       . 
   2334 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2335   .</p>
   2336 
   2337 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-power-management-driver">
   2338 MediaTek      </h3>
   2339 <p>MediaTek       
   2340        
   2341   .        
   2342    .</p>
   2343 
   2344 <table>
   2345   <col width="19%">
   2346   <col width="20%">
   2347   <col width="10%">
   2348   <col width="23%">
   2349   <col width="16%">
   2350   <tr>
   2351    <th>CVE</th>
   2352    <th></th>
   2353    <th></th>
   2354    <th> Nexus </th>
   2355    <th> </th>
   2356   </tr>
   2357   <tr>
   2358    <td>CVE-2016-3804</td>
   2359    <td>A-28332766*<br>
   2360        M-ALPS02694410</td>
   2361    <td></td>
   2362    <td>Android One</td>
   2363    <td>2016 4 20</td>
   2364   </tr>
   2365   <tr>
   2366    <td>CVE-2016-3805</td>
   2367    <td>A-28333002*<br>
   2368        M-ALPS02694412</td>
   2369    <td></td>
   2370    <td>Android One</td>
   2371    <td>2016 4 21</td>
   2372   </tr>
   2373 </table>
   2374 <p>*       . 
   2375 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2376   .</p>
   2377 
   2378 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-display-driver">
   2379 MediaTek     </h3>
   2380 <p>MediaTek      
   2381        
   2382   .        
   2383    .</p>
   2384 
   2385 <table>
   2386   <col width="19%">
   2387   <col width="20%">
   2388   <col width="10%">
   2389   <col width="23%">
   2390   <col width="16%">
   2391   <tr>
   2392    <th>CVE</th>
   2393    <th></th>
   2394    <th></th>
   2395    <th> Nexus </th>
   2396    <th> </th>
   2397   </tr>
   2398   <tr>
   2399    <td>CVE-2016-3806</td>
   2400    <td>A-28402341*<br>
   2401        M-ALPS02715341</td>
   2402    <td></td>
   2403    <td>Android One</td>
   2404    <td>2016 4 26</td>
   2405   </tr>
   2406 </table>
   2407 <p>*       . 
   2408 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2409   .</p>
   2410 
   2411 <h3 id="elevation-of-privilege-vulnerability-in-serial-peripheral-interface-driver">
   2412       </h3>
   2413 <p>       
   2414          
   2415 .        
   2416    .</p>
   2417 
   2418 <table>
   2419   <col width="19%">
   2420   <col width="16%">
   2421   <col width="10%">
   2422   <col width="27%">
   2423   <col width="16%">
   2424   <tr>
   2425    <th>CVE</th>
   2426    <th></th>
   2427    <th></th>
   2428    <th> Nexus </th>
   2429    <th> </th>
   2430   </tr>
   2431   <tr>
   2432    <td>CVE-2016-3807</td>
   2433    <td>A-28402196*</td>
   2434    <td></td>
   2435    <td>Nexus 5X, Nexus 6P</td>
   2436    <td>2016 4 26</td>
   2437   </tr>
   2438   <tr>
   2439    <td>CVE-2016-3808</td>
   2440    <td>A-28430009*</td>
   2441    <td></td>
   2442    <td>Pixel C</td>
   2443    <td>2016 4 26</td>
   2444   </tr>
   2445 </table>
   2446 <p>*       . 
   2447 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2448   .</p>
   2449 
   2450 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-sound-driver">
   2451 Qualcomm     </h3>
   2452 <p>Qualcomm      
   2453        
   2454   .       
   2455     .</p>
   2456 
   2457 <table>
   2458   <col width="19%">
   2459   <col width="16%">
   2460   <col width="10%">
   2461   <col width="27%">
   2462   <col width="16%">
   2463   <tr>
   2464    <th>CVE</th>
   2465    <th></th>
   2466    <th></th>
   2467    <th> Nexus </th>
   2468    <th> </th>
   2469   </tr>
   2470   <tr>
   2471    <td>CVE-2016-2068</td>
   2472    <td>A-28470967
   2473       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?h=APSS.FSM.3.0&id=01ee86da5a0cd788f134e360e2be517ef52b6b00">QC-CR1006609</a></td>
   2474    <td></td>
   2475    <td>Nexus 5, Nexus 5X, Nexus 6, Nexus 6P</td>
   2476    <td>2016 4 28</td>
   2477   </tr>
   2478 </table>
   2479 
   2480 <h3 id="elevation-of-privilege-vulnerability-in-kernel">
   2481    </h3>
   2482 <p>       
   2483       
   2484 .        
   2485    .</p>
   2486 
   2487 <table>
   2488   <col width="19%">
   2489   <col width="20%">
   2490   <col width="10%">
   2491   <col width="23%">
   2492   <col width="16%">
   2493   <tr>
   2494    <th>CVE</th>
   2495    <th></th>
   2496    <th></th>
   2497    <th> Nexus </th>
   2498    <th> </th>
   2499   </tr>
   2500   <tr>
   2501    <td>CVE-2014-9803</td>
   2502    <td>A-28557020<br>
   2503       <a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/arch/arm64/include/asm/pgtable.h?h=linux-3.10.y&id=5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830">
   2504        </a></td>
   2505    <td></td>
   2506    <td>Nexus 5X, Nexus 6P</td>
   2507    <td>Google </td>
   2508   </tr>
   2509 </table>
   2510 
   2511 <h3 id="information-disclosure-vulnerability-in-networking-component">
   2512     </h3>
   2513 <p>        
   2514       .
   2515             
   2516   .</p>
   2517 
   2518 <table>
   2519   <col width="19%">
   2520   <col width="16%">
   2521   <col width="10%">
   2522   <col width="27%">
   2523   <col width="16%">
   2524   <tr>
   2525    <th>CVE</th>
   2526    <th></th>
   2527    <th></th>
   2528    <th> Nexus </th>
   2529    <th> </th>
   2530   </tr>
   2531   <tr>
   2532    <td>CVE-2016-3809</td>
   2533    <td>A-27532522*</td>
   2534    <td></td>
   2535    <td><a href="#all_nexus"> Nexus</a></td>
   2536    <td>2016 3 5</td>
   2537   </tr>
   2538 </table>
   2539 <p>*       . 
   2540 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2541   .</p>
   2542 
   2543 <h3 id="information-disclosure-vulnerability-in-mediatek-wi-fi-driver">
   2544 MediaTek Wi-Fi    </h3>
   2545 <p>MediaTek Wi-Fi     
   2546       
   2547   .      
   2548          .</p>
   2549 
   2550 <table>
   2551   <col width="19%">
   2552   <col width="20%">
   2553   <col width="10%">
   2554   <col width="23%">
   2555   <col width="16%">
   2556   <tr>
   2557    <th>CVE</th>
   2558    <th></th>
   2559    <th></th>
   2560    <th> Nexus </th>
   2561    <th> </th>
   2562   </tr>
   2563   <tr>
   2564    <td>CVE-2016-3810</td>
   2565    <td>A-28175522*<br>
   2566        M-ALPS02694389</td>
   2567    <td></td>
   2568    <td>Android One</td>
   2569    <td>2016 4 12</td>
   2570   </tr>
   2571 </table>
   2572 <p>*       . 
   2573 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2574   .</p>
   2575 
   2576 <h3 id="elevation-of-privilege-vulnerability-in-kernel-video-driver">
   2577      </h3>
   2578 <p>      
   2579        
   2580   .       
   2581     .</p>
   2582 
   2583 <table>
   2584   <col width="19%">
   2585   <col width="16%">
   2586   <col width="10%">
   2587   <col width="27%">
   2588   <col width="16%">
   2589   <tr>
   2590    <th>CVE</th>
   2591    <th></th>
   2592    <th></th>
   2593    <th> Nexus </th>
   2594    <th> </th>
   2595   </tr>
   2596   <tr>
   2597    <td>CVE-2016-3811</td>
   2598    <td>A-28447556*</td>
   2599    <td></td>
   2600    <td>Nexus 9</td>
   2601    <td>Google </td>
   2602   </tr>
   2603 </table>
   2604 <p>*       . 
   2605 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2606   .</p>
   2607 
   2608 <h3 id="information-disclosure-vulnerability-in-mediatek-video-codec-driver">
   2609 MediaTek      </h3>
   2610 <p>MediaTek       
   2611        
   2612  .       
   2613     .</p>
   2614 
   2615 <table>
   2616   <col width="19%">
   2617   <col width="20%">
   2618   <col width="10%">
   2619   <col width="23%">
   2620   <col width="16%">
   2621   <tr>
   2622    <th>CVE</th>
   2623    <th></th>
   2624    <th></th>
   2625    <th> Nexus </th>
   2626    <th> </th>
   2627   </tr>
   2628   <tr>
   2629    <td>CVE-2016-3812</td>
   2630    <td>A-28174833*<br>
   2631        M-ALPS02688832</td>
   2632    <td></td>
   2633    <td>Android One</td>
   2634    <td>2016 4 11</td>
   2635   </tr>
   2636 </table>
   2637 <p>*       . 
   2638 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2639   .</p>
   2640 
   2641 <h3 id="information-disclosure-vulnerability-in-qualcomm-usb-driver">
   2642 Qualcomm USB    </h3>
   2643 <p>Qualcomm USB        
   2644       .
   2645       
   2646     .</p>
   2647 
   2648 <table>
   2649   <col width="19%">
   2650   <col width="16%">
   2651   <col width="10%">
   2652   <col width="27%">
   2653   <col width="16%">
   2654   <tr>
   2655    <th>CVE</th>
   2656    <th></th>
   2657    <th></th>
   2658    <th> Nexus </th>
   2659    <th> </th>
   2660   </tr>
   2661   <tr>
   2662    <td>CVE-2016-3813</td>
   2663    <td>A-28172322*
   2664        QC-CR1010222</td>
   2665    <td></td>
   2666    <td>Nexus 5, Nexus 5X, Nexus 6, Nexus 6P</td>
   2667    <td>2016 4 11</td>
   2668   </tr>
   2669 </table>
   2670 <p>*       . 
   2671 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2672   .</p>
   2673 
   2674 <h3 id="information-disclosure-vulnerability-in-nvidia-camera-driver">
   2675 NVIDIA     </h3>
   2676 <p>NVIDIA         
   2677       .
   2678       
   2679     .</p>
   2680 
   2681 <table>
   2682   <col width="19%">
   2683   <col width="20%">
   2684   <col width="10%">
   2685   <col width="23%">
   2686   <col width="16%">
   2687   <tr>
   2688    <th>CVE</th>
   2689    <th></th>
   2690    <th></th>
   2691    <th> Nexus </th>
   2692    <th> </th>
   2693   </tr>
   2694   <tr>
   2695    <td>CVE-2016-3814</td>
   2696    <td>A-28193342*<br>
   2697        N-CVE20163814</td>
   2698    <td></td>
   2699    <td>Nexus 9</td>
   2700    <td>2016 4 14</td>
   2701   </tr>
   2702   <tr>
   2703    <td>CVE-2016-3815</td>
   2704    <td>A-28522274*<br>
   2705        N-CVE20163815</td>
   2706    <td></td>
   2707    <td>Nexus 9</td>
   2708    <td>2016 5 1</td>
   2709   </tr>
   2710 </table>
   2711 <p>*       . 
   2712 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2713   .</p>
   2714 
   2715 <h3 id="information-disclosure-vulnerability-in-mediatek-display-driver">
   2716 MediaTek     </h3>
   2717 <p>MediaTek      
   2718         
   2719 .       
   2720     .</p>
   2721 
   2722 <table>
   2723   <col width="19%">
   2724   <col width="16%">
   2725   <col width="10%">
   2726   <col width="27%">
   2727   <col width="16%">
   2728   <tr>
   2729    <th>CVE</th>
   2730    <th></th>
   2731    <th></th>
   2732    <th> Nexus </th>
   2733    <th> </th>
   2734   </tr>
   2735   <tr>
   2736    <td>CVE-2016-3816</td>
   2737    <td>A-28402240*</td>
   2738    <td></td>
   2739    <td>Android One</td>
   2740    <td>2016 4 26</td>
   2741   </tr>
   2742 </table>
   2743 <p>*       . 
   2744 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2745   .</p>
   2746 
   2747 <h3 id="information-disclosure-vulnerability-in-kernel-teletype-driver">
   2748      </h3>
   2749 <p>         
   2750       .
   2751       
   2752     .</p>
   2753 
   2754 <table>
   2755   <col width="19%">
   2756   <col width="20%">
   2757   <col width="10%">
   2758   <col width="23%">
   2759   <col width="16%">
   2760   <tr>
   2761    <th>CVE</th>
   2762    <th></th>
   2763    <th></th>
   2764    <th> Nexus </th>
   2765    <th> </th>
   2766   </tr>
   2767   <tr>
   2768    <td>CVE-2016-0723</td>
   2769    <td>A-28409131<br>
   2770       <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439">
   2771 </a></td>
   2772    <td></td>
   2773    <td>Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013), Nexus 9, Nexus
   2774        Player, Pixel C</td>
   2775    <td>2016 4 26</td>
   2776   </tr>
   2777 </table>
   2778 
   2779 <h3 id="denial-of-service-vulnerability-in-qualcomm-bootloader">
   2780 Qualcomm   (DoS) </h3>
   2781 <p>Qualcomm   (DoS)     
   2782       ,     
   2783    .       
   2784     .</p>
   2785 
   2786 <table>
   2787   <col width="19%">
   2788   <col width="16%">
   2789   <col width="10%">
   2790   <col width="27%">
   2791   <col width="16%">
   2792   <tr>
   2793    <th>CVE</th>
   2794    <th></th>
   2795    <th></th>
   2796    <th> Nexus </th>
   2797    <th> </th>
   2798   </tr>
   2799   <tr>
   2800    <td>CVE-2014-9798</td>
   2801    <td>A-28821448
   2802       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484">QC-CR681965</a></td>
   2803    <td></td>
   2804    <td>Nexus 5</td>
   2805    <td>2014 10 31</td>
   2806   </tr>
   2807   <tr>
   2808    <td>CVE-2015-8893</td>
   2809    <td>A-28822690
   2810       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=800255e8bfcc31a02e89460460e3811f225e7a69">QC-CR822275</a></td>
   2811    <td></td>
   2812    <td>Nexus 5, Nexus 7(2013)</td>
   2813    <td>2015 8 19</td>
   2814   </tr>
   2815 </table>
   2816 <h2 id="common-questions-and-answers">   </h2>
   2817 <p>           .</p>
   2818 
   2819 <p><strong>1.          ?</strong></p>
   2820 <p>2016-07-01        2016-07-01
   2821     . 2016-07-05   
   2822     2016-07-05    
   2823 .     
   2824 <a href="https://support.google.com/nexus/answer/4457705"> </a> .   
   2825         .
   2826 [ro.build.version.security_patch]:[2016-07-01] 
   2827 [ro.build.version.security_patch]:[2016-07-05]</p>
   2828 
   2829 <p><strong>2           ?</strong></p>
   2830 <p>  Android   Android  
   2831         
   2832       . Android 
   2833            
   2834 .</p>
   2835 <p>2016 7 5         
   2836       .</p>
   2837 <p>2016 7 1         
   2838          
   2839  . 2016 7 1     
   2840 2016 7 5      
   2841   .</p>
   2842 
   2843 <p id="all_nexus"><strong>3.     Nexus   ?</strong></p>
   2844 <p><a href="#2016-07-01_details">2016-07-01</a> 
   2845 <a href="#2016-07-05_details">2016-07-05</a>    
   2846       Nexus   
   2847  Nexus   .      .</p>
   2848 <ul>
   2849   <li><strong> Nexus </strong>:   Nexus    
   2850    <em> Nexus </em>  ' Nexus' .
   2851   ' Nexus'  
   2852   <a href="https://support.google.com/nexus/answer/4457705#nexus_devices"> </a>
   2853   . Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013),
   2854   Nexus 9, Android One, Nexus Player, Pixel C</li>
   2855   <li><strong> Nexus </strong>:     Nexus
   2856     ,   Nexus 
   2857   <em> Nexus </em>  .</li>
   2858   <li><strong>Nexus  </strong>:  Nexus     
   2859    <em> Nexus </em>  '' .</li>
   2860 </ul>
   2861 
   2862 <p><strong>4.      ?</strong></p>
   2863 <p>   <em></em>      
   2864      .  
   2865   .</p>
   2866 
   2867 <table>
   2868   <tr>
   2869    <th></th>
   2870    <th> </th>
   2871   </tr>
   2872   <tr>
   2873    <td>A-</td>
   2874    <td>Android  ID</td>
   2875   </tr>
   2876   <tr>
   2877    <td>QC-</td>
   2878    <td>Qualcomm  </td>
   2879   </tr>
   2880   <tr>
   2881    <td>M-</td>
   2882    <td>MediaTek  </td>
   2883   </tr>
   2884   <tr>
   2885    <td>N-</td>
   2886    <td>NVIDIA  </td>
   2887   </tr>
   2888 </table>
   2889 
   2890 <h2 id="revisions"></h2>
   2891 <ul>
   2892   <li>2016 7 6:  </li>
   2893   <li>2016 7 7:
   2894     <ul>
   2895       <li>AOSP  
   2896       <li>CVE-2016-3794 CVE-2016-3814  
   2897       <li>CVE-2016-2501  CVE-2016-2502  
   2898     </li></li></li></ul>
   2899   </li>
   2900   <li>2016 7 11: CVE-2016-3750  </li>
   2901   <li>2016 7 14: CVE-2016-2503  </li>
   2902 </ul>
   2903