1 <html devsite> 2 <head> 3 <title>Android - 2016 10 </title> 4 <meta name="project_path" value="/_project.yaml" /> 5 <meta name="book_path" value="/_book.yaml" /> 6 </head> 7 <body> 8 <!-- 9 Copyright 2017 The Android Open Source Project 10 11 Licensed under the Apache License, Version 2.0 (the "License"); 12 you may not use this file except in compliance with the License. 13 You may obtain a copy of the License at 14 15 http://www.apache.org/licenses/LICENSE-2.0 16 17 Unless required by applicable law or agreed to in writing, software 18 distributed under the License is distributed on an "AS IS" BASIS, 19 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 20 See the License for the specific language governing permissions and 21 limitations under the License. 22 --> 23 24 25 <p><em>2016 10 3 | 2016 10 4 </em> 26 </p> 27 <p> 28 Android Android Nexus OTANexus <a href="https://developers.google.com/android/nexus/images">Google </a>2016 10 5 <a href="https://support.google.com/nexus/answer/4457705#nexus_devices"></a> Nexus 2016 10 5 1 OTA 29 </p> 30 <p> 31 2016 9 6 Android AOSP AOSP 32 </p> 33 <p> 34 35 </p> 36 <p> 37 <a href="/security/enhancements/index.html">Android </a> <a href="https://developer.android.com/training/safetynet/index.html">SafetyNet</a> <a href="#mitigations">Android Google </a>Android 38 </p> 39 <p> 40 </p> 41 <h2 id="announcements"></h2> 42 <ul> 43 <li>2 Android Android <a href="#common-questions-and-answers"></a> 44 <ul> 45 <li><strong>2016-10-01</strong>: 2016-10-01 </li> 46 <li><strong>2016-10-05</strong>: 2016-10-01 2016-10-05 </li> 47 </ul> 48 </li> 49 <li> Nexus 2016 10 5 1 OTA </li> 50 </ul> 51 <h2 id="security-vulnerability-summary"></h2> 52 <p> 53 CVENexus <a href="/security/overview/updates-resources.html#severity"></a> 54 </p> 55 <h3 id="2016-10-01-security-patch-level-vulnerability-summary"> 2016-10-01 </h3> 56 <p> 57 2016-10-01 58 </p> 59 <table> 60 <col width="55%"> 61 <col width="20%"> 62 <col width="13%"> 63 <col width="12%"> 64 <tr> 65 <th></th> 66 <th>CVE</th> 67 <th></th> 68 <th>Nexus </th> 69 </tr> 70 <tr> 71 <td>ServiceManager </td> 72 <td>CVE-2016-3900</td> 73 <td></td> 74 <td></td> 75 </tr> 76 <tr> 77 <td></td> 78 <td>CVE-2016-3908</td> 79 <td></td> 80 <td></td> 81 </tr> 82 <tr> 83 <td></td> 84 <td>CVE-2016-3909CVE-2016-3910CVE-2016-3913</td> 85 <td></td> 86 <td></td> 87 </tr> 88 <tr> 89 <td>Zygote </td> 90 <td>CVE-2016-3911</td> 91 <td></td> 92 <td></td> 93 </tr> 94 <tr> 95 <td> API </td> 96 <td>CVE-2016-3912</td> 97 <td></td> 98 <td></td> 99 </tr> 100 <tr> 101 <td>Telephony </td> 102 <td>CVE-2016-3914</td> 103 <td></td> 104 <td></td> 105 </tr> 106 <tr> 107 <td></td> 108 <td>CVE-2016-3915CVE-2016-3916</td> 109 <td></td> 110 <td></td> 111 </tr> 112 <tr> 113 <td></td> 114 <td>CVE-2016-3917</td> 115 <td></td> 116 <td></td> 117 </tr> 118 <tr> 119 <td>AOSP </td> 120 <td>CVE-2016-3918</td> 121 <td></td> 122 <td></td> 123 </tr> 124 <tr> 125 <td>Wi-Fi </td> 126 <td>CVE-2016-3882</td> 127 <td></td> 128 <td></td> 129 </tr> 130 <tr> 131 <td>GPS </td> 132 <td>CVE-2016-5348</td> 133 <td></td> 134 <td></td> 135 </tr> 136 <tr> 137 <td></td> 138 <td>CVE-2016-3920</td> 139 <td></td> 140 <td></td> 141 </tr> 142 <tr> 143 <td> </td> 144 <td>CVE-2016-3921</td> 145 <td></td> 146 <td></td> 147 </tr> 148 <tr> 149 <td>Telephony </td> 150 <td>CVE-2016-3922</td> 151 <td></td> 152 <td></td> 153 </tr> 154 <tr> 155 <td></td> 156 <td>CVE-2016-3923</td> 157 <td></td> 158 <td></td> 159 </tr> 160 <tr> 161 <td></td> 162 <td>CVE-2016-3924</td> 163 <td></td> 164 <td></td> 165 </tr> 166 <tr> 167 <td>Wi-Fi </td> 168 <td>CVE-2016-3925</td> 169 <td></td> 170 <td></td> 171 </tr> 172 </table> 173 <h3 id="2016-10-05-security-patch-level-vulnerability-summary"> 2016-10-05 </h3> 174 <p> 175 2016-10-05 2016-10-01 176 </p> 177 <table> 178 <col width="55%"> 179 <col width="20%"> 180 <col width="13%"> 181 <col width="12%"> 182 <tr> 183 <th></th> 184 <th>CVE</th> 185 <th></th> 186 <th>Nexus </th> 187 </tr> 188 <tr> 189 <td> ASN.1 </td> 190 <td>CVE-2016-0758</td> 191 <td></td> 192 <td></td> 193 </tr> 194 <tr> 195 <td> </td> 196 <td>CVE-2016-7117</td> 197 <td></td> 198 <td></td> 199 </tr> 200 <tr> 201 <td>MediaTek </td> 202 <td>CVE-2016-3928</td> 203 <td></td> 204 <td></td> 205 </tr> 206 <tr> 207 <td></td> 208 <td>CVE-2016-5340</td> 209 <td></td> 210 <td></td> 211 </tr> 212 <tr> 213 <td>Qualcomm </td> 214 <td>CVE-2016-3926CVE-2016-3927CVE-2016-3929</td> 215 <td></td> 216 <td></td> 217 </tr> 218 219 <tr> 220 <td>Qualcomm </td> 221 <td>CVE-2016-2059</td> 222 <td></td> 223 <td></td> 224 </tr> 225 <tr> 226 <td>NVIDIA MMC </td> 227 <td>CVE-2016-3930</td> 228 <td></td> 229 <td></td> 230 </tr> 231 <tr> 232 <td>Qualcomm Secure Execution Environment Communicator </td> 233 <td>CVE-2016-3931</td> 234 <td></td> 235 <td></td> 236 </tr> 237 <tr> 238 <td></td> 239 <td>CVE-2016-3932CVE-2016-3933</td> 240 <td></td> 241 <td></td> 242 </tr> 243 <tr> 244 <td>Qualcomm </td> 245 <td>CVE-2016-3903CVE-2016-3934</td> 246 <td></td> 247 <td></td> 248 </tr> 249 <tr> 250 <td>Qualcomm </td> 251 <td>CVE-2015-8951</td> 252 <td></td> 253 <td></td> 254 </tr> 255 <tr> 256 <td>Qualcomm crypto </td> 257 <td>CVE-2016-3901CVE-2016-3935</td> 258 <td></td> 259 <td></td> 260 </tr> 261 <tr> 262 <td>MediaTek </td> 263 <td>CVE-2016-3936CVE-2016-3937</td> 264 <td></td> 265 <td></td> 266 </tr> 267 <tr> 268 <td>Qualcomm </td> 269 <td>CVE-2016-3938CVE-2016-3939</td> 270 <td></td> 271 <td></td> 272 </tr> 273 <tr> 274 <td>Synaptics </td> 275 <td>CVE-2016-3940CVE-2016-6672</td> 276 <td></td> 277 <td></td> 278 </tr> 279 <tr> 280 <td>NVIDIA </td> 281 <td>CVE-2016-6673</td> 282 <td></td> 283 <td></td> 284 </tr> 285 <tr> 286 <td>system_server </td> 287 <td>CVE-2016-6674</td> 288 <td></td> 289 <td></td> 290 </tr> 291 <tr> 292 <td>Qualcomm Wi-Fi </td> 293 <td>CVE-2016-3905CVE-2016-6675CVE-2016-6676CVE-2016-5342</td> 294 <td></td> 295 <td></td> 296 </tr> 297 <tr> 298 <td> </td> 299 <td>CVE-2015-8955</td> 300 <td></td> 301 <td></td> 302 </tr> 303 <tr> 304 <td> ION </td> 305 <td>CVE-2015-8950</td> 306 <td></td> 307 <td></td> 308 </tr> 309 <tr> 310 <td>NVIDIA GPU </td> 311 <td>CVE-2016-6677</td> 312 <td></td> 313 <td></td> 314 </tr> 315 <tr> 316 <td>Qualcomm </td> 317 <td>CVE-2015-0572</td> 318 <td></td> 319 <td></td> 320 </tr> 321 <tr> 322 <td>Qualcomm </td> 323 <td>CVE-2016-3860</td> 324 <td></td> 325 <td></td> 326 </tr> 327 <tr> 328 <td>Motorola USBNet </td> 329 <td>CVE-2016-6678</td> 330 <td></td> 331 <td></td> 332 </tr> 333 <tr> 334 <td>Qualcomm </td> 335 <td>CVE-2016-6679CVE-2016-3902CVE-2016-6680CVE-2016-6681CVE-2016-6682</td> 336 <td></td> 337 <td></td> 338 </tr> 339 <tr> 340 <td> </td> 341 <td>CVE-2016-6683CVE-2016-6684CVE-2015-8956CVE-2016-6685</td> 342 <td></td> 343 <td></td> 344 </tr> 345 <tr> 346 <td>NVIDIA </td> 347 <td>CVE-2016-6686CVE-2016-6687CVE-2016-6688</td> 348 <td></td> 349 <td></td> 350 </tr> 351 <tr> 352 <td></td> 353 <td>CVE-2016-6689</td> 354 <td></td> 355 <td></td> 356 </tr> 357 <tr> 358 <td> </td> 359 <td>CVE-2016-5696</td> 360 <td></td> 361 <td></td> 362 </tr> 363 <tr> 364 <td> </td> 365 <td>CVE-2016-6690</td> 366 <td></td> 367 <td></td> 368 </tr> 369 <tr> 370 <td>Qualcomm </td> 371 <td>CVE-2016-6691CVE-2016-6692CVE-2016-6693CVE-2016-6694CVE-2016-6695CVE-2016-6696CVE-2016-5344CVE-2016-5343</td> 372 <td></td> 373 <td></td> 374 </tr> 375 </table> 376 377 <h2 id="mitigations">Android Google </h2> 378 <p> 379 <a href="/security/enhancements/index.html">Android </a> SafetyNet Android 380 </p> 381 <ul> 382 <li>Android Android Google Android </li> 383 <li>Android <a href="http://static.googleusercontent.com/media/source.android.com/en//security/reports/Google_Android_Security_2015_Report_Final.pdf"> SafetyNet</a> <a href="http://static.googleusercontent.com/media/source.android.com/en//security/reports/Google_Android_Security_PHA_classifications.pdf"></a><a href="http://www.android.com/gms">Google </a>Google Play Google Play </li> 384 <li>Google </li> 385 </ul> 386 <h2 id="acknowledgements"></h2> 387 <p> 388 389 </p> 390 <ul> 391 <li>Andre Teixeira Rizzo: CVE-2016-3882</li> 392 <li>Andrea Biondo: CVE-2016-3921</li> 393 <li>Copperhead Security Daniel Micay: CVE-2016-3922</li> 394 <li>Google <a href="https://github.com/google/syzkaller">Dmitry Vyukov</a>: CVE-2016-7117</li> 395 <li>dosomder: CVE-2016-3931</li> 396 <li>Trend Micro Ecular Xu: CVE-2016-3920</li> 397 <li>Qihoo 360 Technology Co. Ltd. IceSword Lab Gengjia Chen<a href="https://twitter.com/chengjia4574">@chengjia4574</a> <a href="http://weibo.com/jfpan">pjf</a>: CVE-2016-6690CVE-2016-3901CVE-2016-6672CVE-2016-3940CVE-2016-3935</li> 398 <li>UC Riverside <a href="mailto:hzhan033 (a] ucr.edu">Hang Zhang</a><a href="mailto:dshe002 (a] ucr.edu">Dongdong She</a> <a href="mailto:zhiyunq (a] cs.ucr.edu">Zhiyun Qian</a>: CVE-2015-8950</li> 399 <li>Qihoo 360 Technology Co. Ltd. Alpha Team Hao Chen: CVE-2016-3860</li> 400 <li>Google Project Zero Jann Horn: CVE-2016-3900CVE-2016-3885</li> 401 <li><a href="http://keybase.io/jasonrogena">Jason Rogena</a>: CVE-2016-3917</li> 402 <li>Qihoo 360 IceSword Lab Jianqiang Zhao<a href="https://twitter.com/jianqiangzhao">@jianqiangzhao</a> <a href="http://weibo.com/jfpan">pjf</a>: CVE-2016-6688CVE-2016-6677CVE-2016-6673CVE-2016-6687CVE-2016-6686CVE-2016-6681CVE-2016-6682CVE-2016-3930</li> 403 <li>Joshua Drake<a href="https://twitter.com/jduck">@jduck</a>: CVE-2016-3920</li> 404 <li>Google Maciej Szawowski: CVE-2016-3905</li> 405 <li>Google Project Zero Mark Brand: CVE-2016-6689</li> 406 <li><a href="https://github.com/michalbednarski">Micha Bednarski</a>: CVE-2016-3914CVE-2016-6674CVE-2016-3911CVE-2016-3912</li> 407 <li><a href="http://c0reteam.org">C0RE Team</a> Mingjian Zhou<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>Chiachih Wu<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a> Xuxian Jiang: CVE-2016-3933CVE-2016-3932</li> 408 <li>Nightwatch Cybersecurity Research<a href="https://twitter.com/nightwatchcyber">@nightwatchcyber</a>: CVE-2016-5348</li> 409 <li>IBM Security X-Force Researcher Roee Hay: CVE-2016-6678</li> 410 <li>Google Samuel Tan: CVE-2016-3925</li> 411 <li><a href="mailto:sbauer (a] plzdonthack.me">Scott Bauer</a><a href="https://twitter.com/ScottyBauer1">@ScottyBauer1</a>: CVE-2016-3936CVE-2016-3928CVE-2016-3902CVE-2016-3937CVE-2016-6696</li> 412 <li>Trend Micro Mobile Threat Research Team Seven Shen<a href="https://twitter.com/lingtongshen">@lingtongshen</a>: CVE-2016-6685CVE-2016-6683CVE-2016-6680CVE-2016-6679CVE-2016-3903CVE-2016-6693CVE-2016-6694CVE-2016-6695</li> 413 <li><a href="http://c0reteam.org">C0RE Team</a> <a href="mailto:vancouverdou (a] gmail.com">Wenke Dou</a>Mingjian Zhou<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>Chiachih Wu<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a> Xuxian Jiang: CVE-2016-3909</li> 414 <li>Qihoo 360 Technology Co. Ltd. Alpha Team Wenlin Yang Guang Gong<a href="https://twitter.com/oldfresher">@oldfresher</a>: CVE-2016-3918</li> 415 <li><a href="http://blog.trendmicro.com/trendlabs-security-intelligence/author/wishwu/">Trend Micro Inc.</a> Wish Wu<a href="http://weibo.com/wishlinux"></a><a href="https://twitter.com/wish_wu">@wish_wu</a>: CVE-2016-3924CVE-2016-3915CVE-2016-3916CVE-2016-3910</li> 416 <li>Huawei SCC Eagleye Yong Shi: CVE-2016-3938</li> 417 <li><a href="http://www.cmcm.com">Cheetah Mobile</a> Security Research Lab Zhanpeng Zhao<a href="https://twitter.com/0xr0ot">@0xr0ot</a>: CVE-2016-3908</li> 418 </ul> 419 420 <h2 id="2016-10-01-security-patch-level-vulnerability-details"> 2016-10-01 </h2> 421 <p> 422 <a href="#2016-10-01-security-patch-level-vulnerability-summary"> 2016-10-01 </a>CVE Nexus AOSP AOSP ID ID 423 </p> 424 <h3 id="eopv-in-servicemanager">ServiceManager </h3> 425 <p> 426 ServiceManager system_server 427 </p> 428 <table> 429 <col width="18%"> 430 <col width="16%"> 431 <col width="10%"> 432 <col width="19%"> 433 <col width="19%"> 434 <col width="17%"> 435 <tr> 436 <th>CVE</th> 437 <th></th> 438 <th></th> 439 <th> Nexus </th> 440 <th> AOSP </th> 441 <th></th> 442 </tr> 443 <tr> 444 <td>CVE-2016-3900</td> 445 <td><a href="https://android.googlesource.com/platform/frameworks/native/+/d3c6ce463ac91ecbeb2128beb475d31d3ca6ef42">A-29431260</a> 446 [<a href="https://android.googlesource.com/platform/frameworks/native/+/047eec456943dc082e33220d28abb7df4e089f69">2</a>] 447 </td> 448 <td></td> 449 <td> Nexus</td> 450 <td>5.0.25.1.16.06.0.17.0</td> 451 <td>2016 6 15 </td> 452 </tr> 453 </table> 454 <h3 id="eopv-in-lock-settings-service"></h3> 455 <p> 456 PIN 457 </p> 458 <table> 459 <col width="18%"> 460 <col width="16%"> 461 <col width="10%"> 462 <col width="19%"> 463 <col width="19%"> 464 <col width="17%"> 465 <tr> 466 <th>CVE</th> 467 <th></th> 468 <th></th> 469 <th> Nexus </th> 470 <th> AOSP </th> 471 <th></th> 472 </tr> 473 <tr> 474 <td>CVE-2016-3908</td> 475 <td><a href="https://android.googlesource.com/platform/frameworks/base/+/96daf7d4893f614714761af2d53dfb93214a32e4">A-30003944</a> 476 </td> 477 <td></td> 478 <td> Nexus</td> 479 <td>6.06.0.17.0</td> 480 <td>2016 7 6 </td> 481 </tr> 482 </table> 483 <h3 id="eopv-in-mediaserver"></h3> 484 <p> 485 486 </p> 487 <table> 488 <col width="18%"> 489 <col width="16%"> 490 <col width="10%"> 491 <col width="19%"> 492 <col width="19%"> 493 <col width="17%"> 494 <tr> 495 <th>CVE</th> 496 <th></th> 497 <th></th> 498 <th> Nexus </th> 499 <th> AOSP </th> 500 <th></th> 501 </tr> 502 <tr> 503 <td>CVE-2016-3909</td> 504 <td><a href="https://android.googlesource.com/platform/frameworks/av/+/d4271b792bdad85a80e2b83ab34c4b30b74f53ec">A-30033990</a> 505 [<a href="https://android.googlesource.com/platform/frameworks/av/+/c48ef757cc50906e8726a3bebc3b60716292cdba">2</a>] 506 </td> 507 <td></td> 508 <td> Nexus</td> 509 <td>4.4.45.0.25.1.16.06.0.17.0</td> 510 <td>2016 7 8 </td> 511 </tr> 512 <tr> 513 <td>CVE-2016-3910</td> 514 <td><a href="https://android.googlesource.com/platform/frameworks/av/+/035cb12f392860113dce96116a5150e2fde6f0cc">A-30148546</a> 515 </td> 516 <td></td> 517 <td> Nexus</td> 518 <td>5.0.25.1.16.06.0.17.0</td> 519 <td>2016 7 13 </td> 520 </tr> 521 <tr> 522 <td>CVE-2016-3913</td> 523 <td><a href="https://android.googlesource.com/platform/frameworks/av/+/0c3b93c8c2027e74af642967eee5c142c8fd185d">A-30204103</a> 524 </td> 525 <td></td> 526 <td> Nexus</td> 527 <td>4.4.45.0.25.1.16.06.0.17.0</td> 528 <td>2016 7 18 </td> 529 </tr> 530 </table> 531 <h3 id="eopv-in-zygote-process">Zygote </h3> 532 <p> 533 Zygote 534 </p> 535 <table> 536 <col width="18%"> 537 <col width="16%"> 538 <col width="10%"> 539 <col width="19%"> 540 <col width="19%"> 541 <col width="17%"> 542 <tr> 543 <th>CVE</th> 544 <th></th> 545 <th></th> 546 <th> Nexus </th> 547 <th> AOSP </th> 548 <th></th> 549 </tr> 550 <tr> 551 <td>CVE-2016-3911</td> 552 <td><a href="https://android.googlesource.com/platform/frameworks/base/+/2c7008421cb67f5d89f16911bdbe36f6c35311ad">A-30143607</a> 553 </td> 554 <td></td> 555 <td> Nexus</td> 556 <td>4.4.45.0.25.1.16.06.0.17.0</td> 557 <td>2016 7 12 </td> 558 </tr> 559 </table> 560 <h3 id="eopv-in-framework-apis"> API </h3> 561 <p> 562 API 563 </p> 564 <table> 565 <col width="18%"> 566 <col width="16%"> 567 <col width="10%"> 568 <col width="19%"> 569 <col width="19%"> 570 <col width="17%"> 571 <tr> 572 <th>CVE</th> 573 <th></th> 574 <th></th> 575 <th> Nexus </th> 576 <th> AOSP </th> 577 <th></th> 578 </tr> 579 <tr> 580 <td>CVE-2016-3912</td> 581 <td><a href="https://android.googlesource.com/platform/frameworks/base/+/6c049120c2d749f0c0289d822ec7d0aa692f55c5">A-30202481</a> 582 </td> 583 <td></td> 584 <td> Nexus</td> 585 <td>4.4.45.0.25.1.16.06.0.17.0</td> 586 <td>2016 7 17 </td> 587 </tr> 588 </table> 589 <h3 id="eopv-in-telephony">Telephony </h3> 590 <p> 591 Telephony 592 </p> 593 <table> 594 <col width="18%"> 595 <col width="16%"> 596 <col width="10%"> 597 <col width="19%"> 598 <col width="19%"> 599 <col width="17%"> 600 <tr> 601 <th>CVE</th> 602 <th></th> 603 <th></th> 604 <th> Nexus </th> 605 <th> AOSP </th> 606 <th></th> 607 </tr> 608 <tr> 609 <td>CVE-2016-3914</td> 610 <td><a href="https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/3a3a5d145d380deef2d5b7c3150864cd04be397f">A-30481342</a> 611 </td> 612 <td></td> 613 <td> Nexus</td> 614 <td>4.4.45.0.25.1.16.06.0.17.0</td> 615 <td>2016 7 28 </td> 616 </tr> 617 </table> 618 <h3 id="eopv-in-camera-service"></h3> 619 <p> 620 621 </p> 622 <table> 623 <col width="18%"> 624 <col width="16%"> 625 <col width="10%"> 626 <col width="19%"> 627 <col width="19%"> 628 <col width="17%"> 629 <tr> 630 <th>CVE</th> 631 <th></th> 632 <th></th> 633 <th> Nexus </th> 634 <th> AOSP </th> 635 <th></th> 636 </tr> 637 <tr> 638 <td>CVE-2016-3915</td> 639 <td><a href="https://android.googlesource.com/platform/system/media/+/e9e44f797742f52996ebf307740dad58c28fd9b5">A-30591838</a> 640 </td> 641 <td></td> 642 <td> Nexus</td> 643 <td>4.4.45.0.25.1.16.06.0.17.0</td> 644 <td>2016 8 1 </td> 645 </tr> 646 <tr> 647 <td>CVE-2016-3916</td> 648 <td><a href="https://android.googlesource.com/platform/system/media/+/8e7a2b4d13bff03973dbad2bfb88a04296140433">A-30741779</a> 649 </td> 650 <td></td> 651 <td> Nexus</td> 652 <td>4.4.45.0.25.1.16.06.0.17.0</td> 653 <td>2016 8 2 </td> 654 </tr> 655 </table> 656 <h3 id="eopv-in-fingerprint-login"></h3> 657 <p> 658 659 </p> 660 <table> 661 <col width="18%"> 662 <col width="16%"> 663 <col width="10%"> 664 <col width="19%"> 665 <col width="19%"> 666 <col width="17%"> 667 <tr> 668 <th>CVE</th> 669 <th></th> 670 <th></th> 671 <th> Nexus </th> 672 <th> AOSP </th> 673 <th></th> 674 </tr> 675 <tr> 676 <td>CVE-2016-3917</td> 677 <td><a href="https://android.googlesource.com/platform/frameworks/base/+/f5334952131afa835dd3f08601fb3bced7b781cd">A-30744668</a> 678 </td> 679 <td></td> 680 <td> Nexus</td> 681 <td>6.0.17.0</td> 682 <td>2016 8 5 </td> 683 </tr> 684 </table> 685 <h3 id="information-disclosure-vulnerability-in-aosp-mail">AOSP </h3> 686 <p> 687 AOSP 688 </p> 689 <table> 690 <col width="18%"> 691 <col width="16%"> 692 <col width="10%"> 693 <col width="19%"> 694 <col width="19%"> 695 <col width="17%"> 696 <tr> 697 <th>CVE</th> 698 <th></th> 699 <th></th> 700 <th> Nexus </th> 701 <th> AOSP </th> 702 <th></th> 703 </tr> 704 <tr> 705 <td>CVE-2016-3918</td> 706 <td><a href="https://android.googlesource.com/platform/packages/apps/Email/+/6b2b0bd7c771c698f11d7be89c2c57c8722c7454">A-30745403</a> 707 </td> 708 <td></td> 709 <td> Nexus</td> 710 <td>4.4.45.0.25.1.16.06.0.17.0</td> 711 <td>2016 8 5 </td> 712 </tr> 713 </table> 714 <h3 id="dosv-in-wi-fi">Wi-Fi </h3> 715 <p> 716 Wi-Fi 717 </p> 718 <table> 719 <col width="18%"> 720 <col width="16%"> 721 <col width="10%"> 722 <col width="19%"> 723 <col width="17%"> 724 <col width="19%"> 725 <tr> 726 <th>CVE</th> 727 <th></th> 728 <th></th> 729 <th> Nexus </th> 730 <th> AOSP </th> 731 <th></th> 732 </tr> 733 <tr> 734 <td>CVE-2016-3882</td> 735 <td><a href="https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/35a86eef3c0eef760f7e61c52a343327ba601630">A-29464811</a> 736 </td> 737 <td></td> 738 <td> Nexus</td> 739 <td>6.06.0.17.0</td> 740 <td>2016 6 17 </td> 741 </tr> 742 </table> 743 <h3 id="dosv-in-gps">GPS </h3> 744 <p> 745 GPS 746 </p> 747 <table> 748 <col width="18%"> 749 <col width="16%"> 750 <col width="10%"> 751 <col width="19%"> 752 <col width="19%"> 753 <col width="17%"> 754 <tr> 755 <th>CVE</th> 756 <th></th> 757 <th></th> 758 <th> Nexus </th> 759 <th> AOSP </th> 760 <th></th> 761 </tr> 762 <tr> 763 <td>CVE-2016-5348</td> 764 <td><a href="https://android.googlesource.com/platform/frameworks/base/+/218b813d5bc2d7d3952ea1861c38b4aa944ac59b">A-29555864</a> 765 </td> 766 <td></td> 767 <td> Nexus</td> 768 <td>4.4.45.0.25.1.16.06.0.17.0</td> 769 <td>2016 6 20 </td> 770 </tr> 771 </table> 772 <h3 id="dosv-in-mediaserver"></h3> 773 <p> 774 775 </p> 776 <table> 777 <col width="18%"> 778 <col width="16%"> 779 <col width="10%"> 780 <col width="19%"> 781 <col width="19%"> 782 <col width="17%"> 783 <tr> 784 <th>CVE</th> 785 <th></th> 786 <th></th> 787 <th> Nexus </th> 788 <th> AOSP </th> 789 <th></th> 790 </tr> 791 <tr> 792 <td>CVE-2016-3920</td> 793 <td><a href="https://android.googlesource.com/platform/frameworks/av/+/6d0249be2275fd4086783f259f4e2c54722a7c55">A-30744884</a> 794 </td> 795 <td></td> 796 <td> Nexus</td> 797 <td>5.0.25.1.16.06.0.17.0</td> 798 <td>2016 8 5 </td> 799 </tr> 800 </table> 801 <h3 id="eopv-in-framework-listener"> </h3> 802 <p> 803 804 </p> 805 <table> 806 <col width="18%"> 807 <col width="16%"> 808 <col width="10%"> 809 <col width="18%"> 810 <col width="20%"> 811 <col width="17%"> 812 <tr> 813 <th>CVE</th> 814 <th></th> 815 <th></th> 816 <th> Nexus </th> 817 <th> AOSP </th> 818 <th></th> 819 </tr> 820 <tr> 821 <td>CVE-2016-3921</td> 822 <td><a href="https://android.googlesource.com/platform/system/core/+/771ab014c24a682b32990da08e87e2f0ab765bd2">A-29831647</a> 823 </td> 824 <td></td> 825 <td> Nexus</td> 826 <td>4.4.45.0.25.1.16.06.0.17.0</td> 827 <td>2016 6 25 </td> 828 </tr> 829 </table> 830 <h3 id="eopv-in-telephony-2">Telephony </h3> 831 <p> 832 Telephony 833 </p> 834 <table> 835 <col width="18%"> 836 <col width="16%"> 837 <col width="10%"> 838 <col width="19%"> 839 <col width="19%"> 840 <col width="17%"> 841 <tr> 842 <th>CVE</th> 843 <th></th> 844 <th></th> 845 <th> Nexus </th> 846 <th> AOSP </th> 847 <th></th> 848 </tr> 849 <tr> 850 <td>CVE-2016-3922</td> 851 <td><a href="https://android.googlesource.com/platform/hardware/ril/+/95610818918f6f11fe7d23aca1380e6c0fac2af0">A-30202619</a> 852 </td> 853 <td></td> 854 <td> Nexus</td> 855 <td>6.06.0.17.0</td> 856 <td>2016 7 17 </td> 857 </tr> 858 </table> 859 <h3 id="eopv-in-accessibility-services"></h3> 860 <p> 861 862 </p> 863 <table> 864 <col width="18%"> 865 <col width="16%"> 866 <col width="10%"> 867 <col width="19%"> 868 <col width="18%"> 869 <col width="18%"> 870 <tr> 871 <th>CVE</th> 872 <th></th> 873 <th></th> 874 <th> Nexus </th> 875 <th> AOSP </th> 876 <th></th> 877 </tr> 878 <tr> 879 <td>CVE-2016-3923</td> 880 <td><a href="https://android.googlesource.com/platform/frameworks/base/+/5f256310187b4ff2f13a7abb9afed9126facd7bc">A-30647115</a> 881 </td> 882 <td></td> 883 <td> Nexus</td> 884 <td>7.0</td> 885 <td>Google </td> 886 </tr> 887 </table> 888 <h3 id="information-disclosure-vulnerability-in-mediaserver"></h3> 889 <p> 890 891 </p> 892 <table> 893 <col width="18%"> 894 <col width="16%"> 895 <col width="10%"> 896 <col width="18%"> 897 <col width="20%"> 898 <col width="17%"> 899 <tr> 900 <th>CVE</th> 901 <th></th> 902 <th></th> 903 <th> Nexus </th> 904 <th> AOSP </th> 905 <th></th> 906 </tr> 907 <tr> 908 <td>CVE-2016-3924</td> 909 <td><a href="https://android.googlesource.com/platform/frameworks/av/+/c894aa36be535886a8e5ff02cdbcd07dd24618f6">A-30204301</a> 910 </td> 911 <td></td> 912 <td> Nexus</td> 913 <td>4.4.45.0.25.1.16.06.0.17.0</td> 914 <td>2016 7 18 </td> 915 </tr> 916 </table> 917 <h3 id="dosv-in-wi-fi-2">Wi-Fi </h3> 918 <p> 919 Wi-Fi Wi-Fi 920 </p> 921 <table> 922 <col width="18%"> 923 <col width="16%"> 924 <col width="10%"> 925 <col width="19%"> 926 <col width="17%"> 927 <col width="19%"> 928 <tr> 929 <th>CVE</th> 930 <th></th> 931 <th></th> 932 <th> Nexus </th> 933 <th> AOSP </th> 934 <th></th> 935 </tr> 936 <tr> 937 <td>CVE-2016-3925</td> 938 <td><a href="https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/c2905409c20c8692d4396b8531b09e7ec81fa3fb">A-30230534</a> 939 </td> 940 <td></td> 941 <td> Nexus</td> 942 <td>6.06.0.17.0</td> 943 <td>Google </td> 944 </tr> 945 </table> 946 <h2 id="2016-10-05-security-patch-level-vulnerability-details"> 2016-10-05 </h2> 947 <p> 948 <a href="#2016-10-05-security-patch-level-vulnerability-summary"> 2016-10-05 </a>CVE Nexus AOSP AOSP ID ID 949 </p> 950 <h3 id="remote-code-execution-vulnerability-in-kernel-asn-1-decoder"> ASN.1 </h3> 951 <p> 952 ASN.1 953 </p> 954 <table> 955 <col width="19%"> 956 <col width="20%"> 957 <col width="10%"> 958 <col width="23%"> 959 <col width="17%"> 960 <tr> 961 <th>CVE</th> 962 <th></th> 963 <th></th> 964 <th> Nexus </th> 965 <th></th> 966 </tr> 967 <tr> 968 <td>CVE-2016-0758</td> 969 <td>A-29814470<br> 970 <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23c8a812dc3c621009e4f0e5342aa4e2ede1ceaa"> 971 </a></td> 972 <td></td> 973 <td>Nexus 5XNexus 6P</td> 974 <td>2016 5 12 </td> 975 </tr> 976 </table> 977 <h3 id="remote-code-execution-vulnerability-in-kernel-networking-subsystem"> </h3> 978 <p> 979 980 </p> 981 <table> 982 <col width="19%"> 983 <col width="20%"> 984 <col width="10%"> 985 <col width="23%"> 986 <col width="17%"> 987 <tr> 988 <th>CVE</th> 989 <th></th> 990 <th></th> 991 <th> Nexus </th> 992 <th></th> 993 </tr> 994 <tr> 995 <td>CVE-2016-7117</td> 996 <td>A-30515201<br> 997 <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b88a68f26a75e4fded796f1a49c40f82234b7d"> </a></td> 998 <td></td> 999 <td> Nexus</td> 1000 <td>Google </td> 1001 </tr> 1002 </table> 1003 <h3 id="eopv-in-mediatek-video-driver">MediaTek </h3> 1004 <p> 1005 MediaTek 1006 </p> 1007 <table> 1008 <col width="19%"> 1009 <col width="20%"> 1010 <col width="10%"> 1011 <col width="23%"> 1012 <col width="17%"> 1013 <tr> 1014 <th>CVE</th> 1015 <th></th> 1016 <th></th> 1017 <th> Nexus </th> 1018 <th></th> 1019 </tr> 1020 <tr> 1021 <td>CVE-2016-3928</td> 1022 <td>A-30019362*<br> 1023 M-ALPS02829384</td> 1024 <td></td> 1025 <td></td> 1026 <td>2016 7 6 </td> 1027 </tr> 1028 </table> 1029 <p> 1030 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1031 </p> 1032 <h3 id="eopv-in-kernel-shared-memory-driver"></h3> 1033 <p> 1034 1035 </p> 1036 <table> 1037 <col width="19%"> 1038 <col width="20%"> 1039 <col width="10%"> 1040 <col width="23%"> 1041 <col width="17%"> 1042 <tr> 1043 <th>CVE</th> 1044 <th></th> 1045 <th></th> 1046 <th> Nexus </th> 1047 <th></th> 1048 </tr> 1049 <tr> 1050 <td>CVE-2016-5340</td> 1051 <td>A-30652312<br> 1052 <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=06e51489061e5473b4e2035c79dcf7c27a6f75a6">QC-CR#1008948</a></td> 1053 <td></td> 1054 <td>Nexus 5Nexus 5XNexus 6Nexus 6PAndroid One</td> 1055 <td>2016 7 26 </td> 1056 </tr> 1057 </table> 1058 1059 <h3 id="vulnerabilities-in-qc-components"> 1060 Qualcomm </h3> 1061 <p> 1062 Qualcomm Qualcomm AMSS March 2016 Qualcomm AMSS April 2016 1063 </p> 1064 <table> 1065 <col width="19%"> 1066 <col width="16%"> 1067 <col width="10%"> 1068 <col width="23%"> 1069 <col width="21%"> 1070 <tr> 1071 <th>CVE</th> 1072 <th></th> 1073 <th></th> 1074 <th> Nexus </th> 1075 <th></th> 1076 </tr> 1077 <tr> 1078 <td>CVE-2016-3926</td> 1079 <td>A-28823953*</td> 1080 <td></td> 1081 <td>Nexus 5Nexus 5XNexus 6Nexus 6P</td> 1082 <td>Qualcomm </td> 1083 </tr> 1084 <tr> 1085 <td>CVE-2016-3927</td> 1086 <td>A-28823244*</td> 1087 <td></td> 1088 <td>Nexus 5XNexus 6P</td> 1089 <td>Qualcomm </td> 1090 </tr> 1091 <tr> 1092 <td>CVE-2016-3929</td> 1093 <td>A-28823675*</td> 1094 <td></td> 1095 <td>Nexus 5XNexus 6P</td> 1096 <td>Qualcomm </td> 1097 </tr> 1098 </table> 1099 <p> 1100 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1101 </p> 1102 <h3 id="eopv-in-qualcomm-networking-component">Qualcomm </h3> 1103 <p> 1104 Qualcomm 1105 </p> 1106 <table> 1107 <col width="19%"> 1108 <col width="20%"> 1109 <col width="10%"> 1110 <col width="23%"> 1111 <col width="17%"> 1112 <tr> 1113 <th>CVE</th> 1114 <th></th> 1115 <th></th> 1116 <th> Nexus </th> 1117 <th></th> 1118 </tr> 1119 <tr> 1120 <td>CVE-2016-2059</td> 1121 <td>A-27045580<br> 1122 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=9e8bdd63f7011dff5523ea435433834b3702398d">QC-CR#974577</a></td> 1123 <td></td> 1124 <td>Nexus 5Nexus 5XNexus 6Nexus 6PAndroid One</td> 1125 <td>2016 2 4 </td> 1126 </tr> 1127 </table> 1128 <h3 id="eopv-in-nvidia-mmc-test-driver">NVIDIA MMC </h3> 1129 <p> 1130 NVIDIA MMC 1131 </p> 1132 <table> 1133 <col width="19%"> 1134 <col width="20%"> 1135 <col width="10%"> 1136 <col width="23%"> 1137 <col width="17%"> 1138 <tr> 1139 <th>CVE</th> 1140 <th></th> 1141 <th></th> 1142 <th> Nexus </th> 1143 <th></th> 1144 </tr> 1145 <tr> 1146 <td>CVE-2016-3930</td> 1147 <td>A-28760138*<br> 1148 N-CVE-2016-3930</td> 1149 <td></td> 1150 <td>Nexus 9</td> 1151 <td>2016 5 12 </td> 1152 </tr> 1153 </table> 1154 <p> 1155 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1156 </p> 1157 <h3 id="eopv-in-qsee-communicator-driver">Qualcomm QSEE Communicator </h3> 1158 <p> 1159 Qualcomm QSEE Communicator 1160 </p> 1161 <table> 1162 <col width="19%"> 1163 <col width="20%"> 1164 <col width="10%"> 1165 <col width="23%"> 1166 <col width="17%"> 1167 <tr> 1168 <th>CVE</th> 1169 <th></th> 1170 <th></th> 1171 <th> Nexus </th> 1172 <th></th> 1173 </tr> 1174 <tr> 1175 <td>CVE-2016-3931</td> 1176 <td>A-29157595<br> 1177 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=e80b88323f9ff0bb0e545f209eec08ec56fca816">QC-CR#1036418</a></td> 1178 <td></td> 1179 <td>Nexus 5XNexus 6Nexus 6PAndroid One</td> 1180 <td>2016 6 4 </td> 1181 </tr> 1182 </table> 1183 <h3 id="eopv-in-mediaserver-2"></h3> 1184 <p> 1185 1186 </p> 1187 <table> 1188 <col width="19%"> 1189 <col width="20%"> 1190 <col width="10%"> 1191 <col width="23%"> 1192 <col width="17%"> 1193 <tr> 1194 <th>CVE</th> 1195 <th></th> 1196 <th></th> 1197 <th> Nexus </th> 1198 <th></th> 1199 </tr> 1200 <tr> 1201 <td>CVE-2016-3932</td> 1202 <td>A-29161895<br> 1203 M-ALPS02770870</td> 1204 <td></td> 1205 <td></td> 1206 <td>2016 6 6 </td> 1207 </tr> 1208 <tr> 1209 <td>CVE-2016-3933</td> 1210 <td>A-29421408*<br> 1211 N-CVE-2016-3933</td> 1212 <td></td> 1213 <td>Nexus 9Pixel C</td> 1214 <td>2016 6 14 </td> 1215 </tr> 1216 </table> 1217 <p> 1218 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1219 </p> 1220 <h3 id="eopv-in-qualcomm-camera-driver">Qualcomm </h3> 1221 <p> 1222 Qualcomm 1223 </p> 1224 <table> 1225 <col width="19%"> 1226 <col width="20%"> 1227 <col width="10%"> 1228 <col width="23%"> 1229 <col width="17%"> 1230 <tr> 1231 <th>CVE</th> 1232 <th></th> 1233 <th></th> 1234 <th> Nexus </th> 1235 <th></th> 1236 </tr> 1237 <tr> 1238 <td>CVE-2016-3903</td> 1239 <td>A-29513227<br> 1240 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=b8874573428e8ce024f57c6242d662fcca5e5d55">QC-CR#1040857</a></td> 1241 <td></td> 1242 <td>Nexus 5Nexus 5XNexus 6Nexus 6PAndroid One</td> 1243 <td>2016 6 20 </td> 1244 </tr> 1245 <tr> 1246 <td>CVE-2016-3934</td> 1247 <td>A-30102557<br> 1248 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=27fbeb6b025d5d46ccb0497cbed4c6e78ed1c5cc">QC-CR#789704</a></td> 1249 <td></td> 1250 <td>Nexus 5Nexus 5XNexus 6Nexus 6PAndroid One</td> 1251 <td>2016 7 12 </td> 1252 </tr> 1253 </table> 1254 <h3 id="eopv-in-qualcomm-sound-driver">Qualcomm </h3> 1255 <p> 1256 Qualcomm 1257 </p> 1258 <table> 1259 <col width="19%"> 1260 <col width="20%"> 1261 <col width="10%"> 1262 <col width="23%"> 1263 <col width="17%"> 1264 <tr> 1265 <th>CVE</th> 1266 <th></th> 1267 <th></th> 1268 <th> Nexus </th> 1269 <th></th> 1270 </tr> 1271 <tr> 1272 <td>CVE-2015-8951</td> 1273 <td>A-30142668<br> 1274 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?h=APSS.FSM.3.0&id=ccff36b07bfc49efc77b9f1b55ed2bf0900b1d5b">QC-CR#948902</a><br> 1275 QC-CR#948902</td> 1276 <td></td> 1277 <td>Nexus 5XNexus 6PAndroid One</td> 1278 <td>2016 6 20 </td> 1279 </tr> 1280 </table> 1281 <h3 id="eopv-in-qualcomm-crypto-engine-driver">Qualcomm crypto </h3> 1282 <p> 1283 Qualcomm 1284 </p> 1285 <table> 1286 <col width="19%"> 1287 <col width="20%"> 1288 <col width="10%"> 1289 <col width="23%"> 1290 <col width="17%"> 1291 <tr> 1292 <th>CVE</th> 1293 <th></th> 1294 <th></th> 1295 <th> Nexus </th> 1296 <th></th> 1297 </tr> 1298 <tr> 1299 <td>CVE-2016-3901</td> 1300 <td>A-29999161<br> 1301 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5f69ccf3b011c1d14a1b1b00dbaacf74307c9132">QC-CR#1046434</a></td> 1302 <td></td> 1303 <td>Nexus 5XNexus 6Nexus 6PAndroid One</td> 1304 <td>2016 7 6 </td> 1305 </tr> 1306 <tr> 1307 <td>CVE-2016-3935</td> 1308 <td>A-29999665<br> 1309 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=5f69ccf3b011c1d14a1b1b00dbaacf74307c9132">QC-CR#1046507</a></td> 1310 <td></td> 1311 <td>Nexus 5XNexus 6Nexus 6PAndroid One</td> 1312 <td>2016 7 6 </td> 1313 </tr> 1314 </table> 1315 <h3 id="eopv-in-mediatek-video-driver-2">MediaTek </h3> 1316 <p> 1317 MediaTek 1318 </p> 1319 <table> 1320 <col width="19%"> 1321 <col width="20%"> 1322 <col width="10%"> 1323 <col width="23%"> 1324 <col width="17%"> 1325 <tr> 1326 <th>CVE</th> 1327 <th></th> 1328 <th></th> 1329 <th> Nexus </th> 1330 <th></th> 1331 </tr> 1332 <tr> 1333 <td>CVE-2016-3936</td> 1334 <td>A-30019037*<br> 1335 M-ALPS02829568</td> 1336 <td></td> 1337 <td></td> 1338 <td>2016 7 6 </td> 1339 </tr> 1340 <tr> 1341 <td>CVE-2016-3937</td> 1342 <td>A-30030994*<br> 1343 M-ALPS02834874</td> 1344 <td></td> 1345 <td></td> 1346 <td>2016 7 7 </td> 1347 </tr> 1348 </table> 1349 <p> 1350 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1351 </p> 1352 <h3 id="eopv-in-qualcomm-video-driver">Qualcomm </h3> 1353 <p> 1354 Qualcomm 1355 </p> 1356 <table> 1357 <col width="19%"> 1358 <col width="20%"> 1359 <col width="10%"> 1360 <col width="23%"> 1361 <col width="17%"> 1362 <tr> 1363 <th>CVE</th> 1364 <th></th> 1365 <th></th> 1366 <th> Nexus </th> 1367 <th></th> 1368 </tr> 1369 <tr> 1370 <td>CVE-2016-3938</td> 1371 <td>A-30019716<br> 1372 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=467c81f9736b1ebc8d4ba70f9221bba02425ca10">QC-CR#1049232</a></td> 1373 <td></td> 1374 <td>Nexus 5XNexus 6Nexus 6PAndroid One</td> 1375 <td>2016 7 7 </td> 1376 </tr> 1377 <tr> 1378 <td>CVE-2016-3939</td> 1379 <td>A-30874196<br> 1380 <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=e0bb18771d6ca71db2c2a61226827059be3fa424">QC-CR#1001224</a></td> 1381 <td></td> 1382 <td>Nexus 5XNexus 6Nexus 6PAndroid One</td> 1383 <td>2016 8 15 </td> 1384 </tr> 1385 </table> 1386 <h3 id="eopv-in-synaptics-touchscreen-driver">Synaptics </h3> 1387 <p> 1388 Synaptics 1389 </p> 1390 <table> 1391 <col width="19%"> 1392 <col width="20%"> 1393 <col width="10%"> 1394 <col width="23%"> 1395 <col width="17%"> 1396 <tr> 1397 <th>CVE</th> 1398 <th></th> 1399 <th></th> 1400 <th> Nexus </th> 1401 <th></th> 1402 </tr> 1403 <tr> 1404 <td>CVE-2016-3940</td> 1405 <td>A-30141991*</td> 1406 <td></td> 1407 <td>Nexus 6PAndroid One</td> 1408 <td>2016 7 12 </td> 1409 </tr> 1410 <tr> 1411 <td>CVE-2016-6672</td> 1412 <td>A-30537088*</td> 1413 <td></td> 1414 <td>Nexus 5X</td> 1415 <td>2016 7 31 </td> 1416 </tr> 1417 </table> 1418 <p> 1419 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1420 </p> 1421 <h3 id="eopv-in-nvidia-camera-driver">NVIDIA </h3> 1422 <p> 1423 NVIDIA 1424 </p> 1425 <table> 1426 <col width="19%"> 1427 <col width="20%"> 1428 <col width="10%"> 1429 <col width="23%"> 1430 <col width="17%"> 1431 <tr> 1432 <th>CVE</th> 1433 <th></th> 1434 <th></th> 1435 <th> Nexus </th> 1436 <th></th> 1437 </tr> 1438 <tr> 1439 <td>CVE-2016-6673</td> 1440 <td>A-30204201*<br> 1441 N-CVE-2016-6673</td> 1442 <td></td> 1443 <td>Nexus 9</td> 1444 <td>2016 7 17 </td> 1445 </tr> 1446 </table> 1447 <p> 1448 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1449 </p> 1450 <h3 id="eopv-in-system_server">system_server </h3> 1451 <p> 1452 system_server 1453 </p> 1454 <table> 1455 <col width="19%"> 1456 <col width="20%"> 1457 <col width="10%"> 1458 <col width="23%"> 1459 <col width="17%"> 1460 <tr> 1461 <th>CVE</th> 1462 <th></th> 1463 <th></th> 1464 <th> Nexus </th> 1465 <th></th> 1466 </tr> 1467 <tr> 1468 <td>CVE-2016-6674</td> 1469 <td>A-30445380*</td> 1470 <td></td> 1471 <td> Nexus</td> 1472 <td>2016 7 26 </td> 1473 </tr> 1474 </table> 1475 <p> 1476 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1477 </p> 1478 <h3 id="eopv-in-qualcomm-wi-fi-driver">Qualcomm Wi-Fi </h3> 1479 <p> 1480 Qualcomm Wi-Fi 1481 </p> 1482 <table> 1483 <col width="19%"> 1484 <col width="20%"> 1485 <col width="10%"> 1486 <col width="23%"> 1487 <col width="17%"> 1488 <tr> 1489 <th>CVE</th> 1490 <th></th> 1491 <th></th> 1492 <th> Nexus </th> 1493 <th></th> 1494 </tr> 1495 <tr> 1496 <td>CVE-2016-3905</td> 1497 <td>A-28061823<br> 1498 <a href="https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=b5112838eb91b71eded4b5ee37338535784e0aef">QC-CR#1001449</a></td> 1499 <td></td> 1500 <td>Nexus 5X</td> 1501 <td>Google </td> 1502 </tr> 1503 <tr> 1504 <td>CVE-2016-6675</td> 1505 <td>A-30873776<br> 1506 <a href="https://source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/prima/commit/?id=1353fa0bd0c78427f3ae7d9bde7daeb75bd01d09">QC-CR#1000861</a></td> 1507 <td></td> 1508 <td>Nexus 5XAndroid One</td> 1509 <td>2016 8 15 </td> 1510 </tr> 1511 <tr> 1512 <td>CVE-2016-6676</td> 1513 <td>A-30874066<br> 1514 <a href="https://source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=6ba9136879232442a182996427e5c88e5a7512a8">QC-CR#1000853</a></td> 1515 <td></td> 1516 <td>Nexus 5XAndroid One</td> 1517 <td>2016 8 15 </td> 1518 </tr> 1519 <tr> 1520 <td>CVE-2016-5342</td> 1521 <td>A-30878283<br> 1522 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=579e796cb089324c55e0e689a180575ba81b23d9">QC-CR#1032174</a></td> 1523 <td></td> 1524 <td>Android One</td> 1525 <td>2016 8 15 </td> 1526 </tr> 1527 </table> 1528 <h3 id="eopv-in-kernel-performance-subsystem"> </h3> 1529 <p> 1530 1531 </p> 1532 <table> 1533 <col width="19%"> 1534 <col width="20%"> 1535 <col width="10%"> 1536 <col width="23%"> 1537 <col width="17%"> 1538 <tr> 1539 <th>CVE</th> 1540 <th></th> 1541 <th></th> 1542 <th> Nexus </th> 1543 <th></th> 1544 </tr> 1545 <tr> 1546 <td>CVE-2015-8955</td> 1547 <td>A-29508816<br> 1548 <a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=8fff105e13041e49b82f92eef034f363a6b1c071"> </a></td> 1549 <td></td> 1550 <td>Nexus 5XNexus 6PPixel CAndroid One</td> 1551 <td>Google </td> 1552 </tr> 1553 </table> 1554 <h3 id="information-disclosure-vulnerability-in-kernel-ion-subsystem"> ION </h3> 1555 <p> 1556 ION 1557 </p> 1558 <table> 1559 <col width="19%"> 1560 <col width="20%"> 1561 <col width="10%"> 1562 <col width="23%"> 1563 <col width="17%"> 1564 <tr> 1565 <th>CVE</th> 1566 <th></th> 1567 <th></th> 1568 <th> Nexus </th> 1569 <th></th> 1570 </tr> 1571 <tr> 1572 <td>CVE-2015-8950</td> 1573 <td>A-29795245<br> 1574 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8">QC-CR#1041735</a></td> 1575 <td></td> 1576 <td>Nexus 5Nexus 5XNexus 6Nexus 6P</td> 1577 <td>2016 5 12 </td> 1578 </tr> 1579 </table> 1580 <h3 id="information-disclosure-vulnerability-in-nvidia-gpu-driver">NVIDIA GPU </h3> 1581 <p> 1582 NVIDIA GPU 1583 </p> 1584 <table> 1585 <col width="19%"> 1586 <col width="20%"> 1587 <col width="10%"> 1588 <col width="23%"> 1589 <col width="17%"> 1590 <tr> 1591 <th>CVE</th> 1592 <th></th> 1593 <th></th> 1594 <th> Nexus </th> 1595 <th></th> 1596 </tr> 1597 <tr> 1598 <td>CVE-2016-6677</td> 1599 <td>A-30259955*<br> 1600 N-CVE-2016-6677</td> 1601 <td></td> 1602 <td>Nexus 9</td> 1603 <td>2016 7 19 </td> 1604 </tr> 1605 </table> 1606 <p> 1607 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1608 </p> 1609 <h3 id="eopv-in-qualcomm-character-driver">Qualcomm </h3> 1610 <p> 1611 Qualcomm 1612 </p> 1613 <table> 1614 <col width="19%"> 1615 <col width="20%"> 1616 <col width="10%"> 1617 <col width="23%"> 1618 <col width="17%"> 1619 <tr> 1620 <th>CVE</th> 1621 <th></th> 1622 <th></th> 1623 <th> Nexus </th> 1624 <th></th> 1625 </tr> 1626 <tr> 1627 <td>CVE-2015-0572</td> 1628 <td>A-29156684<br> 1629 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=34ad3d34fbff11b8e1210b9da0dac937fb956b61">QC-CR#848489</a></td> 1630 <td></td> 1631 <td>Nexus 5XNexus 6P</td> 1632 <td>2016 5 28 </td> 1633 </tr> 1634 </table> 1635 <h3 id="information-disclosure-vulnerability-in-qualcomm-sound-driver">Qualcomm </h3> 1636 <p> 1637 Qualcomm 1638 </p> 1639 <table> 1640 <col width="19%"> 1641 <col width="20%"> 1642 <col width="10%"> 1643 <col width="23%"> 1644 <col width="17%"> 1645 <tr> 1646 <th>CVE</th> 1647 <th></th> 1648 <th></th> 1649 <th> Nexus </th> 1650 <th></th> 1651 </tr> 1652 <tr> 1653 <td>CVE-2016-3860</td> 1654 <td>A-29323142<br> 1655 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/diff/sound/soc/msm/qdsp6v2/audio_calibration.c?id=528976f54be246ec93a71ac53aa4faf3e3791c48">QC-CR#1038127</a></td> 1656 <td></td> 1657 <td>Nexus 5XNexus 6PAndroid One</td> 1658 <td>2016 6 13 </td> 1659 </tr> 1660 </table> 1661 <h3 id="information-disclosure-vulnerability-in-motorola-usbnet-driver">Motorola USBNet </h3> 1662 <p> 1663 Motorola USBNet 1664 </p> 1665 <table> 1666 <col width="19%"> 1667 <col width="20%"> 1668 <col width="10%"> 1669 <col width="23%"> 1670 <col width="17%"> 1671 <tr> 1672 <th>CVE</th> 1673 <th></th> 1674 <th></th> 1675 <th> Nexus </th> 1676 <th></th> 1677 </tr> 1678 <tr> 1679 <td>CVE-2016-6678</td> 1680 <td>A-29914434*</td> 1681 <td></td> 1682 <td>Nexus 6</td> 1683 <td>2016 6 30 </td> 1684 </tr> 1685 </table> 1686 <p> 1687 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1688 </p> 1689 <h3 id="information-disclosure-vulnerability-in-qualcomm-components">Qualcomm </h3> 1690 <p> 1691 Qualcomm IPA Wi-Fi 1692 </p> 1693 <table> 1694 <col width="19%"> 1695 <col width="20%"> 1696 <col width="10%"> 1697 <col width="23%"> 1698 <col width="17%"> 1699 <tr> 1700 <th>CVE</th> 1701 <th></th> 1702 <th></th> 1703 <th> Nexus </th> 1704 <th></th> 1705 </tr> 1706 <tr> 1707 <td>CVE-2016-6679</td> 1708 <td>A-29915601<br> 1709 <a href="https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=d39345f0abc309959d831d09fcbf1619cc0ae0f5">QC-CR#1000913</a> 1710 [<a href="https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f081695446679aa44baa0d00940ea18455eeb4c5">2</a>]</td> 1711 <td></td> 1712 <td>Nexus 5XAndroid One</td> 1713 <td>2016 6 30 </td> 1714 </tr> 1715 <tr> 1716 <td>CVE-2016-3902</td> 1717 <td>A-29953313*<br> 1718 <a href="https://source.codeaurora.org/quic/la//kernel/msm-3.10/commit/?id=2fca425d781572393fbe51abe2e27a932d24a768">QC-CR#1044072</a></td> 1719 <td></td> 1720 <td>Nexus 5XNexus 6P</td> 1721 <td>2016 7 2 </td> 1722 </tr> 1723 <tr> 1724 <td>CVE-2016-6680</td> 1725 <td>A-29982678*<br> 1726 <a href="https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=2f2fa073b95d4700de88c0f7558b4a18c13ac552">QC-CR#1048052</a></td> 1727 <td></td> 1728 <td>Nexus 5XAndroid One</td> 1729 <td>2016 7 3 </td> 1730 </tr> 1731 <tr> 1732 <td>CVE-2016-6681</td> 1733 <td>A-30152182<br> 1734 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395">QC-CR#1049521</a></td> 1735 <td></td> 1736 <td>Nexus 5XNexus 6PAndroid One</td> 1737 <td>2016 7 14 </td> 1738 </tr> 1739 <tr> 1740 <td>CVE-2016-6682</td> 1741 <td>A-30152501<br> 1742 <a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=0950fbd39ff189497f1b6115825c210e3eeaf395">QC-CR#1049615</a></td> 1743 <td></td> 1744 <td>Nexus 5XNexus 6PAndroid One</td> 1745 <td>2016 7 14 </td> 1746 </tr> 1747 </table> 1748 <p> 1749 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1750 </p> 1751 <h3 id="information-disclosure-vulnerability-in-kernel-components"> </h3> 1752 <p> 1753 BinderBluetooth 1754 </p> 1755 <table> 1756 <col width="19%"> 1757 <col width="18%"> 1758 <col width="10%"> 1759 <col width="25%"> 1760 <col width="17%"> 1761 <tr> 1762 <th>CVE</th> 1763 <th></th> 1764 <th></th> 1765 <th> Nexus </th> 1766 <th></th> 1767 </tr> 1768 <tr> 1769 <td>CVE-2016-6683</td> 1770 <td>A-30143283*</td> 1771 <td></td> 1772 <td> Nexus</td> 1773 <td>2016 7 13 </td> 1774 </tr> 1775 <tr> 1776 <td>CVE-2016-6684</td> 1777 <td>A-30148243*</td> 1778 <td></td> 1779 <td>Nexus 5Nexus 5XNexus 6Nexus 6PNexus 9Nexus PlayerAndroid One</td> 1780 <td>2016 7 13 </td> 1781 </tr> 1782 <tr> 1783 <td>CVE-2015-8956</td> 1784 <td>A-30149612*</td> 1785 <td></td> 1786 <td>Nexus 5Nexus 6PAndroid One</td> 1787 <td>2016 7 14 </td> 1788 </tr> 1789 <tr> 1790 <td>CVE-2016-6685</td> 1791 <td>A-30402628*</td> 1792 <td></td> 1793 <td>Nexus 6P</td> 1794 <td>2016 7 25 </td> 1795 </tr> 1796 </table> 1797 <p> 1798 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1799 </p> 1800 <h3 id="information-disclosure-vulnerability-in-nvidia-profiler">NVIDIA </h3> 1801 <p> 1802 NVIDIA 1803 </p> 1804 <table> 1805 <col width="19%"> 1806 <col width="20%"> 1807 <col width="10%"> 1808 <col width="23%"> 1809 <col width="17%"> 1810 <tr> 1811 <th>CVE</th> 1812 <th></th> 1813 <th></th> 1814 <th> Nexus </th> 1815 <th></th> 1816 </tr> 1817 <tr> 1818 <td>CVE-2016-6686</td> 1819 <td>A-30163101*<br> 1820 N-CVE-2016-6686</td> 1821 <td></td> 1822 <td>Nexus 9</td> 1823 <td>2016 7 15 </td> 1824 </tr> 1825 <tr> 1826 <td>CVE-2016-6687</td> 1827 <td>A-30162222*<br> 1828 N-CVE-2016-6687</td> 1829 <td></td> 1830 <td>Nexus 9</td> 1831 <td>2016 7 15 </td> 1832 </tr> 1833 <tr> 1834 <td>CVE-2016-6688</td> 1835 <td>A-30593080*<br> 1836 N-CVE-2016-6688</td> 1837 <td></td> 1838 <td>Nexus 9</td> 1839 <td>2016 8 2 </td> 1840 </tr> 1841 </table> 1842 <p> 1843 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1844 </p> 1845 <h3 id="information-disclosure-vulnerability-in-kernel"></h3> 1846 <p> 1847 Binder 1848 </p> 1849 <table> 1850 <col width="19%"> 1851 <col width="20%"> 1852 <col width="10%"> 1853 <col width="23%"> 1854 <col width="17%"> 1855 <tr> 1856 <th>CVE</th> 1857 <th></th> 1858 <th></th> 1859 <th> Nexus </th> 1860 <th></th> 1861 </tr> 1862 <tr> 1863 <td>CVE-2016-6689</td> 1864 <td>A-30768347*</td> 1865 <td></td> 1866 <td> Nexus</td> 1867 <td>2016 8 9 </td> 1868 </tr> 1869 </table> 1870 <p> 1871 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1872 </p> 1873 <h3 id="dosv-in-kernel-networking-subsystem"> </h3> 1874 <p> 1875 TCP 1876 </p> 1877 <table> 1878 <col width="19%"> 1879 <col width="18%"> 1880 <col width="10%"> 1881 <col width="25%"> 1882 <col width="17%"> 1883 <tr> 1884 <th>CVE</th> 1885 <th></th> 1886 <th></th> 1887 <th> Nexus </th> 1888 <th></th> 1889 </tr> 1890 <tr> 1891 <td>CVE-2016-5696</td> 1892 <td>A-30809774<br> 1893 <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=75ff39ccc1bd5d3c455b6822ab09e533c551f758"> </a></td> 1894 <td></td> 1895 <td>Nexus 5XNexus 6Nexus 6PNexus 9Nexus PlayerPixel CAndroid One</td> 1896 <td>2016 7 12 </td> 1897 </tr> 1898 </table> 1899 <h3 id="dosv-in-kernel-sound-driver"> </h3> 1900 <p> 1901 1902 </p> 1903 <table> 1904 <col width="19%"> 1905 <col width="18%"> 1906 <col width="10%"> 1907 <col width="25%"> 1908 <col width="17%"> 1909 <tr> 1910 <th>CVE</th> 1911 <th></th> 1912 <th></th> 1913 <th> Nexus </th> 1914 <th></th> 1915 </tr> 1916 <tr> 1917 <td>CVE-2016-6690</td> 1918 <td>A-28838221*</td> 1919 <td></td> 1920 <td>Nexus 5Nexus 5XNexus 6Nexus 6PNexus Player</td> 1921 <td>2016 5 18 </td> 1922 </tr> 1923 </table> 1924 <p> 1925 * <a href="https://developers.google.com/android/nexus/drivers">Google </a> Nexus 1926 </p> 1927 <h3 id="vulnerabilities-in-qualcomm-components">Qualcomm </h3> 1928 <p> 1929 Qualcomm 1930 </p> 1931 <table> 1932 <col width="19%"> 1933 <col width="20%"> 1934 <col width="10%"> 1935 <col width="23%"> 1936 <col width="17%"> 1937 <tr> 1938 <th>CVE</th> 1939 <th></th> 1940 <th></th> 1941 <th> Nexus </th> 1942 <th></th> 1943 </tr> 1944 <tr> 1945 <td>CVE-2016-6691</td> 1946 <td><a href="https://source.codeaurora.org/quic/la//platform/frameworks/opt/net/wifi/commit/?id=343f123c396b2a97fc7cce396cd5d99365cb9131">QC-CR#978452</a></td> 1947 <td></td> 1948 <td></td> 1949 <td>2016 7 </td> 1950 </tr> 1951 <tr> 1952 <td>CVE-2016-6692</td> 1953 <td><a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=0f0e7047d39f9fb3a1a7f389918ff79cdb4a50b3">QC-CR#1004933</a></td> 1954 <td></td> 1955 <td></td> 1956 <td>2016 8 </td> 1957 </tr> 1958 <tr> 1959 <td>CVE-2016-6693</td> 1960 <td><a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=ac328eb631fa74a63d5d2583e6bfeeb5a7a2df65">QC-CR#1027585</a></td> 1961 <td></td> 1962 <td></td> 1963 <td>2016 8 </td> 1964 </tr> 1965 <tr> 1966 <td>CVE-2016-6694</td> 1967 <td><a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=961e38553aae8ba9b1af77c7a49acfbb7b0b6f62">QC-CR#1033525</a></td> 1968 <td></td> 1969 <td></td> 1970 <td>2016 8 </td> 1971 </tr> 1972 <tr> 1973 <td>CVE-2016-6695</td> 1974 <td><a href="https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=c319c2b0926d1ea5edb4d0778d88bd3ce37c4b95">QC-CR#1033540</a></td> 1975 <td></td> 1976 <td></td> 1977 <td>2016 8 </td> 1978 </tr> 1979 <tr> 1980 <td>CVE-2016-6696</td> 1981 <td><a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=c3c9341bfdf93606983f893a086cb33a487306e5">QC-CR#1041130</a></td> 1982 <td></td> 1983 <td></td> 1984 <td>2016 8 </td> 1985 </tr> 1986 <tr> 1987 <td>CVE-2016-5344</td> 1988 <td><a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=64e15c36d6c1c57dc2d95a3f163bc830a469fc20">QC-CR#993650</a></td> 1989 <td></td> 1990 <td></td> 1991 <td>2016 8 </td> 1992 </tr> 1993 <tr> 1994 <td>CVE-2016-5343</td> 1995 <td><a href="https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=6927e2e0af4dcac357be86ba563c9ae12354bb08">QC-CR#1010081</a></td> 1996 <td></td> 1997 <td></td> 1998 <td>2016 8 </td> 1999 </tr> 2000 </table> 2001 <h2 id="common-questions-and-answers"></h2> 2002 <p> 2003 2004 </p> 2005 <p> 2006 <strong>1. 2007 </strong> 2008 </p> 2009 <p> 2010 2016-10-01 2016-08-05 2016-10-05 2016-10-05 <a href="https://support.google.com/nexus/answer/4457705"></a> [ro.build.version.security_patch]:[2016-10-01] [ro.build.version.security_patch]:[2016-10-05] 2011 </p> 2012 <p> 2013 <strong>2. 2 </strong> 2014 </p> 2015 <p> 2016 2 Android Android Android 2017 </p> 2018 <p> 2019 2016 10 5 2020 </p> 2021 <p> 2022 2016 10 1 2023 </p> 2024 <p> 2025 <strong>3. Nexus </strong> 2026 </p> 2027 <p> 2028 <a href="#2016-10-01-security-patch-level-vulnerability-details">2016-10-01</a> <a href="#2016-10-05-security-patch-level-vulnerability-details">2016-10-05</a> Nexus Nexus <em></em> 2029 </p> 2030 <ul> 2031 <li><strong> Nexus </strong>: Nexus Nexus Nexus<em></em> Nexus<a href="https://support.google.com/nexus/answer/4457705#nexus_devices"></a>Nexus 5Nexus 5XNexus 6Nexus 6PNexus 72013Nexus 9Android OneNexus PlayerPixel C</li> 2032 <li><strong> Nexus </strong>: Nexus Nexus Nexus <em></em></li> 2033 <li><strong> Nexus </strong>: Android 7.0 Nexus Nexus <em></em></li> 2034 </ul> 2035 <p> 2036 <strong>4. </strong> 2037 </p> 2038 <p> 2039 <em></em> 2040 </p> 2041 <table> 2042 <tr> 2043 <th></th> 2044 <th></th> 2045 </tr> 2046 <tr> 2047 <td>A-</td> 2048 <td>Android ID</td> 2049 </tr> 2050 <tr> 2051 <td>QC-</td> 2052 <td>Qualcomm </td> 2053 </tr> 2054 <tr> 2055 <td>M-</td> 2056 <td>MediaTek </td> 2057 </tr> 2058 <tr> 2059 <td>N-</td> 2060 <td>NVIDIA </td> 2061 </tr> 2062 <tr> 2063 <td>B-</td> 2064 <td>Broadcom </td> 2065 </tr> 2066 </table> 2067 2068 <h2 id="revisions"></h2> 2069 <ul> 2070 <li>2016 10 3 : </li> 2071 <li>2016 10 4 : AOSP CVE-2016-3920CVE-2016-6693CVE-2016-6694CVE-2016-6695CVE-2016-6696 </li> 2072 </ul> 2073 2074 </body> 2075 </html> 2076