Home | History | Annotate | Download | only in bulletin
      1 <html devsite>
      2   <head>
      3     <title>Android   - 2016 7</title>
      4     <meta name="project_path" value="/_project.yaml" />
      5     <meta name="book_path" value="/_book.yaml" />
      6   </head>
      7   <body>
      8   <!--
      9       Copyright 2017 The Android Open Source Project
     10 
     11       Licensed under the Apache License, Version 2.0 (the "License");
     12       you may not use this file except in compliance with the License.
     13       You may obtain a copy of the License at
     14 
     15           http://www.apache.org/licenses/LICENSE-2.0
     16 
     17       Unless required by applicable law or agreed to in writing, software
     18       distributed under the License is distributed on an "AS IS" BASIS,
     19       WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     20       See the License for the specific language governing permissions and
     21       limitations under the License.
     22   -->
     23 
     24 
     25 
     26 <p><em>2016 7 6  | 2016 7 14 </em></p>
     27 <p>Android   Android     
     28  .     
     29 Nexus    . 
     30 Nexus   <a href="https://developers.google.com/android/nexus/images">Google  </a>
     31 .      2016 7 5   
     32  .      
     33 <a href="https://support.google.com/nexus/answer/4457705#nexus_devices"></a> .</p>
     34 <p>
     35     2016 6 6 
     36 .  ,    Android
     37  (AOSP)  . 
     38   AOSP     .</p>
     39 
     40 <p>        
     41   , MMS      
     42         .</p>
     43 <p>        
     44  . SafetyNet  Android   
     45 <a href="/security/enhancements/index.html">Android   </a> 
     46      
     47 <a href="">Android  Google  </a>  .</p>
     48 <p>       .</p>
     49 <h2 id="announcements"></h2>
     50 <ul>
     51   <li>  Android   Android  
     52             
     53             .  
     54       <a href="#common-questions-and-answers">   </a>
     55       .
     56     <ul>
     57        <li><strong>2016-07-01</strong>:     .  
     58           2016-07-01 
     59           .
     60        <li><strong>2016-07-05</strong>:     .  
     61           2016-07-01 2016-07-05 
     62           .</li>
     63      </li></ul>
     64   </li>
     65   <li> Nexus  2016 7 5    OTA
     66         .</li>
     67  </ul>
     68 <h2 id="security_vulnerability_summary">  </h2>
     69 <p>    ,     ID(CVE),
     70    Nexus    
     71  . <a href="/security/overview/updates-resources.html#severity"> </a>
     72         
     73          
     74  .</p>
     75 
     76 <h3 id="2016-07-01_summary">2016-07-01    </h3>
     77 <p>
     78   2016 7 1     .</p>
     79 
     80 <table>
     81   <col width="55%">
     82   <col width="20%">
     83   <col width="13%">
     84   <col width="12%">
     85   <tr>
     86    <th></th>
     87    <th>CVE</th>
     88    <th></th>
     89    <th>Nexus  </th>
     90   </tr>
     91   <tr>
     92    <td>     </td>
     93    <td>CVE-2016-2506, CVE-2016-2505, CVE-2016-2507, CVE-2016-2508,
     94        CVE-2016-3741, CVE-2016-3742, CVE-2016-3743</td>
     95    <td></td>
     96    <td></td>
     97   </tr>
     98   <tr>
     99    <td>OpenSSL &amp; BoringSSL    </td>
    100    <td>CVE-2016-2108</td>
    101    <td></td>
    102    <td></td>
    103   </tr>
    104   <tr>
    105    <td>    </td>
    106    <td>CVE-2016-3744</td>
    107    <td></td>
    108    <td></td>
    109   </tr>
    110   <tr>
    111    <td>libpng   </td>
    112    <td>CVE-2016-3751</td>
    113    <td></td>
    114    <td></td>
    115   </tr>
    116   <tr>
    117    <td>    </td>
    118    <td>CVE-2016-3745, CVE-2016-3746, CVE-2016-3747</td>
    119    <td></td>
    120    <td></td>
    121   </tr>
    122   <tr>
    123    <td>   </td>
    124    <td>CVE-2016-3748</td>
    125    <td></td>
    126    <td></td>
    127   </tr>
    128   <tr>
    129    <td>LockSettingsService   </td>
    130    <td>CVE-2016-3749</td>
    131    <td></td>
    132    <td></td>
    133   </tr>
    134   <tr>
    135    <td> API   </td>
    136    <td>CVE-2016-3750</td>
    137    <td></td>
    138    <td></td>
    139   </tr>
    140   <tr>
    141    <td>ChooserTarget    </td>
    142    <td>CVE-2016-3752</td>
    143    <td></td>
    144    <td></td>
    145   </tr>
    146   <tr>
    147    <td>    </td>
    148    <td>CVE-2016-3753</td>
    149    <td></td>
    150    <td>*</td>
    151   </tr>
    152   <tr>
    153    <td>OpenSSL   </td>
    154    <td>CVE-2016-2107</td>
    155    <td></td>
    156    <td>*</td>
    157   </tr>
    158   <tr>
    159    <td>   (DoS) </td>
    160    <td>CVE-2016-3754, CVE-2016-3755, CVE-2016-3756</td>
    161    <td></td>
    162    <td></td>
    163   </tr>
    164   <tr>
    165    <td>libc  (DoS) </td>
    166    <td>CVE-2016-3818</td>
    167    <td></td>
    168    <td>*</td>
    169   </tr>
    170   <tr>
    171    <td>lsof   </td>
    172    <td>CVE-2016-3757</td>
    173    <td></td>
    174    <td></td>
    175   </tr>
    176   <tr>
    177    <td>DexClassLoader   </td>
    178    <td>CVE-2016-3758</td>
    179    <td></td>
    180    <td></td>
    181   </tr>
    182   <tr>
    183    <td> API   </td>
    184    <td>CVE-2016-3759</td>
    185    <td></td>
    186    <td></td>
    187   </tr>
    188   <tr>
    189    <td>   </td>
    190    <td>CVE-2016-3760</td>
    191    <td></td>
    192    <td></td>
    193   </tr>
    194   <tr>
    195    <td>NFC   </td>
    196    <td>CVE-2016-3761</td>
    197    <td></td>
    198    <td></td>
    199   </tr>
    200   <tr>
    201    <td>   </td>
    202    <td>CVE-2016-3762</td>
    203    <td></td>
    204    <td></td>
    205   </tr>
    206   <tr>
    207    <td>     </td>
    208    <td>CVE-2016-3763</td>
    209    <td></td>
    210    <td></td>
    211   </tr>
    212   <tr>
    213    <td>    </td>
    214    <td>CVE-2016-3764, CVE-2016-3765</td>
    215    <td></td>
    216    <td></td>
    217   </tr>
    218   <tr>
    219    <td>   (DoS) </td>
    220    <td>CVE-2016-3766</td>
    221    <td></td>
    222    <td></td>
    223   </tr>
    224 </table>
    225 <p>*  Nexus      
    226    .</p>
    227 
    228 
    229 <h3 id="2016-07-05_summary">2016-07-05    </h3>
    230 <p>
    231 2016-07-01     2016 7 5
    232     .</p>
    233 
    234 <table>
    235   <col width="55%">
    236   <col width="20%">
    237   <col width="13%">
    238   <col width="12%">
    239   <tr>
    240    <th></th>
    241    <th>CVE</th>
    242    <th></th>
    243    <th>Nexus  </th>
    244   </tr>
    245   <tr>
    246    <td>Qualcomm GPU    (
    247        )</td>
    248    <td>CVE-2016-2503, CVE-2016-2067</td>
    249    <td></td>
    250    <td></td>
    251   </tr>
    252   <tr>
    253    <td>MediaTek Wi-Fi    (
    254        )</td>
    255    <td>CVE-2016-3767</td>
    256    <td></td>
    257    <td></td>
    258   </tr>
    259   <tr>
    260    <td>Qualcomm     
    261        ( )</td>
    262    <td>CVE-2016-3768</td>
    263    <td></td>
    264    <td></td>
    265   </tr>
    266   <tr>
    267    <td>NVIDIA     (
    268        )</td>
    269    <td>CVE-2016-3769</td>
    270    <td></td>
    271    <td></td>
    272   </tr>
    273   <tr>
    274    <td>MediaTek    (
    275        )</td>
    276    <td>CVE-2016-3770, CVE-2016-3771, CVE-2016-3772, CVE-2016-3773,
    277        CVE-2016-3774</td>
    278    <td></td>
    279    <td></td>
    280   </tr>
    281   <tr>
    282    <td>     (
    283        )</td>
    284    <td>CVE-2016-3775</td>
    285    <td></td>
    286    <td></td>
    287   </tr>
    288   <tr>
    289    <td>USB    ( )</td>
    290    <td>CVE-2015-8816</td>
    291    <td></td>
    292    <td></td>
    293   </tr>
    294   <tr>
    295    <td>Qualcomm    (
    296        )</td>
    297    <td>CVE-2014-9794, CVE-2014-9795, CVE-2015-8892, CVE-2013-7457, CVE-2014-9781,
    298        CVE-2014-9786, CVE-2014-9788, CVE-2014-9779, CVE-2014-9780, CVE-2014-9789,
    299        CVE-2014-9793, CVE-2014-9782, CVE-2014-9783, CVE-2014-9785, CVE-2014-9787,
    300        CVE-2014-9784, CVE-2014-9777, CVE-2014-9778, CVE-2014-9790, CVE-2014-9792,
    301        CVE-2014-9797, CVE-2014-9791, CVE-2014-9796, CVE-2014-9800, CVE-2014-9799,
    302        CVE-2014-9801, CVE-2014-9802, CVE-2015-8891, CVE-2015-8888, CVE-2015-8889,
    303        CVE-2015-8890</td>
    304    <td></td>
    305    <td></td>
    306   </tr>
    307   <tr>
    308    <td>Qualcomm USB    (
    309        )</td>
    310    <td>CVE-2016-2502</td>
    311    <td></td>
    312    <td></td>
    313   </tr>
    314   <tr>
    315    <td>Qualcomm Wi-Fi    (
    316        )</td>
    317    <td>CVE-2016-3792</td>
    318    <td></td>
    319    <td></td>
    320   </tr>
    321   <tr>
    322    <td>Qualcomm     (
    323        )</td>
    324    <td>CVE-2016-2501</td>
    325    <td></td>
    326    <td></td>
    327   </tr>
    328   <tr>
    329    <td>NVIDIA     (
    330        )</td>
    331    <td>CVE-2016-3793</td>
    332    <td></td>
    333    <td></td>
    334   </tr>
    335   <tr>
    336    <td>MediaTek     (
    337        )</td>
    338    <td>CVE-2016-3795, CVE-2016-3796</td>
    339    <td></td>
    340    <td></td>
    341   </tr>
    342   <tr>
    343    <td>Qualcomm Wi-Fi    (
    344        )</td>
    345    <td>CVE-2016-3797</td>
    346    <td></td>
    347    <td></td>
    348   </tr>
    349   <tr>
    350    <td>MediaTek      
    351        ( )</td>
    352    <td>CVE-2016-3798</td>
    353    <td></td>
    354    <td></td>
    355   </tr>
    356   <tr>
    357    <td>MediaTek     (
    358        )</td>
    359    <td>CVE-2016-3799, CVE-2016-3800</td>
    360    <td></td>
    361    <td></td>
    362   </tr>
    363   <tr>
    364    <td>MediaTek GPS    (
    365        )</td>
    366    <td>CVE-2016-3801</td>
    367    <td></td>
    368    <td></td>
    369   </tr>
    370   <tr>
    371    <td>     (
    372        )</td>
    373    <td>CVE-2016-3802, CVE-2016-3803</td>
    374    <td></td>
    375    <td></td>
    376   </tr>
    377   <tr>
    378    <td>MediaTek      
    379        ( )</td>
    380    <td>CVE-2016-3804, CVE-2016-3805</td>
    381    <td></td>
    382    <td></td>
    383   </tr>
    384   <tr>
    385    <td>MediaTek     (
    386        )</td>
    387    <td>CVE-2016-3806</td>
    388    <td></td>
    389    <td></td>
    390   </tr>
    391   <tr>
    392    <td>      
    393        ( )</td>
    394    <td>CVE-2016-3807, CVE-2016-3808</td>
    395    <td></td>
    396    <td></td>
    397   </tr>
    398   <tr>
    399    <td>Qualcomm     (
    400        )</td>
    401    <td>CVE-2016-2068</td>
    402    <td></td>
    403    <td></td>
    404   </tr>
    405   <tr>
    406    <td>   ( )</td>
    407    <td>CVE-2014-9803</td>
    408    <td></td>
    409    <td></td>
    410   </tr>
    411   <tr>
    412    <td>    (
    413        )</td>
    414    <td>CVE-2016-3809</td>
    415    <td></td>
    416    <td></td>
    417   </tr>
    418   <tr>
    419    <td>MediaTek Wi-Fi    (
    420        )</td>
    421    <td>CVE-2016-3810</td>
    422    <td></td>
    423    <td></td>
    424   </tr>
    425   <tr>
    426    <td>     (
    427        )</td>
    428    <td>CVE-2016-3811</td>
    429    <td></td>
    430    <td></td>
    431   </tr>
    432   <tr>
    433    <td>MediaTek      
    434        ( )</td>
    435    <td>CVE-2016-3812</td>
    436    <td></td>
    437    <td></td>
    438   </tr>
    439   <tr>
    440    <td>Qualcomm USB    (
    441        )</td>
    442    <td>CVE-2016-3813</td>
    443    <td></td>
    444    <td></td>
    445   </tr>
    446   <tr>
    447    <td>NVIDIA     (
    448        )</td>
    449    <td>CVE-2016-3814, CVE-2016-3815</td>
    450    <td></td>
    451    <td></td>
    452   </tr>
    453   <tr>
    454    <td>MediaTek     (
    455        )</td>
    456    <td>CVE-2016-3816</td>
    457    <td></td>
    458    <td></td>
    459   </tr>
    460   <tr>
    461    <td>     (
    462        )</td>
    463    <td>CVE-2016-0723</td>
    464    <td></td>
    465    <td></td>
    466   </tr>
    467   <tr>
    468    <td>Qualcomm   (DoS) (
    469        )</td>
    470    <td>CVE-2014-9798, CVE-2015-8893</td>
    471    <td></td>
    472    <td></td>
    473   </tr>
    474 </table>
    475 
    476 <h2 id="mitigations">Android  Google  </h2>
    477 <p> SafetyNet  <a href="/security/enhancements/index.html">Android  </a> 
    478       .
    479    Android    
    480 .</p>
    481 <ul>
    482   <li>Android      Android  
    483     .      Android
    484     .</li>
    485   <li>Android  <a href="/security/reports/Google_Android_Security_PHA_classifications.pdf">   </a>
    486   
    487       <a href="/security/reports/Google_Android_Security_2015_Report_Final.pdf">   SafetyNet</a> 
    488   
    489     .   <a href="http://www.android.com/gms">Google  </a> 
    490       
    491   Google Play      . Google Play
    492        
    493         
    494      .   
    495          
    496    .        
    497        .</li>
    498   <li>  Google       
    499      .</li>
    500 </ul>
    501 
    502 <h2 id="acknowledgements"></h2>
    503 <p>    .</p>
    504 <ul>
    505   <li>Chrome  Abhishek Arya, Oliver Chang, Martin Barbella: CVE-2016-3756, CVE-2016-3741, CVE-2016-3743, CVE-2016-3742
    506   <li>Check Point Software Technologies Ltd. Adam Donenfeld et al.: CVE-2016-2503
    507   <li>Google Adam Powell: CVE-2016-3752
    508   <li>Context Information Security Alex Chapman, Paul Stone: CVE-2016-3763
    509   <li><a href="https://www.e2e-assure.com/">e2e-assure</a> Andy Tyler
    510   (<a href="https://twitter.com/ticarpi">@ticarpi</a>): CVE-2016-2457
    511   <li>Google Project Zero Ben Hawkes: CVE-2016-3775
    512   <li><a href="http://c0reteam.org">C0RE</a> Chiachih Wu(<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a>),
    513   Yuan-Tsung Lo(<a href="mailto:computernik (a] gmail.com">computernik (a] gmail.com</a>),
    514   Xuxian Jiang: CVE-2016-3770,
    515   CVE-2016-3771, CVE-2016-3772, CVE-2016-3773, CVE-2016-3774
    516   <li>Google Christopher Tate: CVE-2016-3759
    517   <li>Tencent KeenLab(<a href="https://twitter.com/keen_lab">@keen_lab</a>)
    518   Di Shen(<a href="https://twitter.com/returnsme">@returnsme</a>): CVE-2016-3762
    519   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd.</a> IceSword Lab
    520   Gengjia Chen(<a href="https://twitter.com/chengjia4574">@chengjia4574</a>),
    521   pjf(<a href="http://weibo.com/jfpan">weibo.com/jfpan</a>): CVE-2016-3806,
    522   CVE-2016-3816, CVE-2016-3805, CVE-2016-3804, CVE-2016-3767, CVE-2016-3810,
    523   CVE-2016-3795, CVE-2016-3796
    524   <li>Google Android Greg Kaiser: CVE-2016-3758
    525   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd</a>.
    526 Mobile Safe Team Guang Gong()
    527 (<a href="https://twitter.com/oldfresher">@oldfresher</a>): CVE-2016-3764
    528   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd</a>. Mobile Safe Team
    529   Hao Chen, Guang Gong: CVE-2016-3792, CVE-2016-3768
    530   <li><a href="http://www.cmcm.com">Cheetah Mobile</a> Security Research Lab
    531   Hao Qin: CVE-2016-3754, CVE-2016-3766
    532   <li><a href="http://www.360.com">Qihoo 360 Technology Co. Ltd</a>.
    533   IceSword Lab Jianqiang Zhao(<a href="https://twitter.com/jianqiangzhao">@jianqiangzhao</a>),
    534   pjf(<a href="http://weibo.com/jfpan">weibo.com/jfpan</a>): CVE-2016-3814,CVE-2016-3802,
    535   CVE-2016-3769, CVE-2016-3807, CVE-2016-3808
    536   <li>Google Marco Nelissen: CVE-2016-3818
    537   <li>Google Project Zero Mark Brand: CVE-2016-3757
    538   <li><a href="https://github.com/michalbednarski">Micha Bednarski</a>: CVE-2016-3750
    539   <li><a href="http://c0reteam.org">C0RE</a> Mingjian Zhou(<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>),
    540   Chiachih Wu(<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a>),
    541   Xuxian Jiang: CVE-2016-3747,
    542   CVE-2016-3746, CVE-2016-3765
    543   <li>Alibaba Mobile Security Group Peng Xiao, Chengming Yang, Ning You,
    544   Chao Yang, Yang Ssong: CVE-2016-3800, CVE-2016-3799, CVE-2016-3801,
    545   CVE-2016-3812, CVE-2016-3798
    546   <li>Trend Micro Peter Pi(<a href="https://twitter.com/heisecode">@heisecode</a>):
    547   CVE-2016-3793
    548   <li>Google Ricky Wai: CVE-2016-3749
    549   <li>Roeland Krak: CVE-2016-3753
    550   <li>Scott Bauer(<a href="https://twitter.com/ScottyBauer1">@ScottyBauer1</a>):
    551   CVE-2016-3797, CVE-2016-3813, CVE-2016-3815, CVE-2016-2501, CVE-2016-2502
    552   <li>Vasily Vasilev: CVE-2016-2507
    553   <li>Alibaba Inc. Weichao Sun(<a href="https://twitter.com/sunblate">@sunblate</a>)
    554 : CVE-2016-2508, CVE-2016-3755
    555   <li>Tencent KeenLab(<a href="https://twitter.com/keen_lab">@keen_lab</a>)
    556   Wen Niu(<a href="https://twitter.com/NWMonster">@NWMonster</a>): CVE-2016-3809
    557   <li>Tencent Security Platform Department Xiling Gong: CVE-2016-3745
    558   <li>Chinese Academy of Sciences Institute of Software TCA Lab Yacong Gu:
    559   CVE-2016-3761
    560   <li>Tencent Xuanwu LAB Yongke Wang(<a href="https://twitter.com/Rudykewang">@Rudykewang</a>)
    561   : CVE-2016-2505
    562   <li>Tencent Xuanwu LAB Yongke Wang(<a href="https://twitter.com/Rudykewang">@Rudykewang</a>),
    563   Wei Wei(<a href="https://twitter.com/Danny__Wei">@Danny__Wei</a>)
    564   : CVE-2016-2506
    565   <li>Baidu X-Lab Yulong Zhang, Tao (Lenx) Wei: CVE-2016-3744</li>
    566 </li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></li></ul>
    567 
    568 <h2 id="2016-07-01_details">2016-07-01     </h2>
    569 <p>   <a href="#2016-07-01_summary">2016-07-01   
    570  </a>    
    571 .   ,   
    572 CVE,  , ,  Nexus ,
    573  AOSP ( ),      .  
    574 AOSP         ID
    575 .        
    576   ID    .</p>
    577 
    578 <h3 id="remote-code-execution-vulnerability-in-mediaserver">
    579      </h3>
    580 <p>          
    581           
    582 .           
    583   .   
    584       
    585       .</p>
    586 <p>    ,  
    587    ,  MMS   
    588    .</p>
    589 
    590 <table>
    591   <col width="19%">
    592   <col width="19%">
    593   <col width="10%">
    594   <col width="16%">
    595   <col width="17%">
    596   <col width="17%">
    597   <tr>
    598    <th>CVE</th>
    599    <th></th>
    600    <th></th>
    601    <th> Nexus </th>
    602    <th> AOSP </th>
    603    <th> </th>
    604   </tr>
    605   <tr>
    606    <td>CVE-2016-2506</td>
    607    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/e248db02fbab2ee9162940bc19f087fd7d96cb9d">
    608        A-28175045</a></td>
    609    <td></td>
    610    <td><a href="#all_nexus"> Nexus</a></td>
    611    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    612    <td>2016 4 11</td>
    613   </tr>
    614   <tr>
    615    <td>CVE-2016-2505</td>
    616    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/4f236c532039a61f0cf681d2e3c6e022911bbb5c">
    617        A-28333006</a></td>
    618    <td></td>
    619    <td><a href="#all_nexus"> Nexus</a></td>
    620    <td>6.0, 6.0.1</td>
    621    <td>2016 4 21</td>
    622   </tr>
    623   <tr>
    624    <td>CVE-2016-2507</td>
    625    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/60547808ca4e9cfac50028c00c58a6ceb2319301">
    626        A-28532266</a></td>
    627    <td></td>
    628    <td><a href="#all_nexus"> Nexus</a></td>
    629    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    630    <td>2016 5 2</td>
    631   </tr>
    632   <tr>
    633    <td>CVE-2016-2508</td>
    634    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/f81038006b4c59a5a148dcad887371206033c28f">
    635        A-28799341</a>
    636        [<a href="https://android.googlesource.com/platform/frameworks/av/+/d112f7d0c1dbaf0368365885becb11ca8d3f13a4">2</a>]
    637    </td>
    638    <td></td>
    639    <td><a href="#all_nexus"> Nexus</a></td>
    640    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    641    <td>2016 5 16</td>
    642   </tr>
    643   <tr>
    644    <td>CVE-2016-3741</td>
    645    <td><a href="https://android.googlesource.com/platform/external/libavc/+/e629194c62a9a129ce378e08cb1059a8a53f1795">
    646        A-28165661</a>
    647        [<a href="https://android.googlesource.com/platform/external/libavc/+/cc676ebd95247646e67907ccab150fb77a847335">2</a>]
    648    </td>
    649    <td></td>
    650    <td><a href="#all_nexus"> Nexus</a></td>
    651    <td>6.0, 6.0.1</td>
    652    <td>Google </td>
    653   </tr>
    654   <tr>
    655    <td>CVE-2016-3742</td>
    656    <td><a href="https://android.googlesource.com/platform/external/libavc/+/a583270e1c96d307469c83dc42bd3c5f1b9ef63f">
    657        A-28165659</a>
    658    </td>
    659    <td></td>
    660    <td><a href="#all_nexus"> Nexus</a></td>
    661    <td>6.0, 6.0.1</td>
    662    <td>Google </td>
    663   </tr>
    664   <tr>
    665    <td>CVE-2016-3743</td>
    666    <td><a href="https://android.googlesource.com/platform/external/libavc/+/ecf6c7ce6d5a22d52160698aab44fc234c63291a">
    667        A-27907656</a>
    668    </td>
    669    <td></td>
    670    <td><a href="#all_nexus"> Nexus</a></td>
    671    <td>6.0, 6.0.1</td>
    672    <td>Google </td>
    673   </tr>
    674 </table>
    675 
    676 
    677 <h3 id="remote-code-execution-vulnerability-in-openssl-&amp;-boringssl">
    678 OpenSSL &amp; BoringSSL    </h3>
    679 <p>OpenSSL  BoringSSL         
    680         
    681 .           
    682   .</p>
    683 
    684 <table>
    685   <col width="19%">
    686   <col width="16%">
    687   <col width="10%">
    688   <col width="19%">
    689   <col width="18%">
    690   <col width="16%">
    691   <tr>
    692    <th>CVE</th>
    693    <th></th>
    694    <th></th>
    695    <th> Nexus </th>
    696    <th> AOSP </th>
    697    <th> </th>
    698   </tr>
    699   <tr>
    700    <td>CVE-2016-2108</td>
    701    <td><a href="https://android.googlesource.com/platform/external/boringssl/+/74750e1fb24149043a533497f79c577b704d6e30">
    702        A-28175332</a>
    703    </td>
    704    <td></td>
    705    <td><a href="#all_nexus"> Nexus</a></td>
    706    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    707    <td>2016 5 3</td>
    708   </tr>
    709 </table>
    710 
    711 <h3 id="remote-code-execution-vulnerability-in-bluetooth">
    712     </h3>
    713 <p>         
    714     .  
    715         
    716   .</p>
    717 
    718 <table>
    719   <col width="19%">
    720   <col width="16%">
    721   <col width="10%">
    722   <col width="19%">
    723   <col width="18%">
    724   <col width="16%">
    725   <tr>
    726    <th>CVE</th>
    727    <th></th>
    728    <th></th>
    729    <th> Nexus </th>
    730    <th> AOSP </th>
    731    <th> </th>
    732   </tr>
    733   <tr>
    734    <td>CVE-2016-3744</td>
    735    <td><a href="https://android.googlesource.com/platform/system/bt/+/514139f4b40cbb035bb92f3e24d5a389d75db9e6">
    736        A-27930580</a></td>
    737    <td></td>
    738    <td><a href="#all_nexus"> Nexus</a></td>
    739    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    740    <td>2016 3 30</td>
    741   </tr>
    742 </table>
    743 
    744 <h3 id="elevation-of-privilege-vulnerability-in-libpng">
    745 libpng   </h3>
    746 <p>libpng       
    747         
    748 .        
    749 <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a> 
    750 <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>  
    751            .</p>
    752 
    753 <table>
    754   <col width="19%">
    755   <col width="16%">
    756   <col width="10%">
    757   <col width="19%">
    758   <col width="18%">
    759   <col width="16%">
    760   <tr>
    761    <th>CVE</th>
    762    <th></th>
    763    <th></th>
    764    <th> Nexus </th>
    765    <th> AOSP </th>
    766    <th> </th>
    767   </tr>
    768   <tr>
    769    <td>CVE-2016-3751</td>
    770    <td><a href="https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca">
    771        A-23265085</a>
    772    </td>
    773    <td></td>
    774    <td><a href="#all_nexus"> Nexus</a></td>
    775    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    776    <td>2015 12 3</td>
    777   </tr>
    778 </table>
    779 
    780 <h3 id="elevation-of-privilege-vulnerability-in-mediaserver">
    781     </h3>
    782 <p>                  .   <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a>  <a href="https://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>
    783       
    784            .</p>
    785 
    786 <table>
    787   <col width="19%">
    788   <col width="16%">
    789   <col width="10%">
    790   <col width="19%">
    791   <col width="18%">
    792   <col width="16%">
    793   <tr>
    794    <th>CVE</th>
    795    <th></th>
    796    <th></th>
    797    <th> Nexus </th>
    798    <th> AOSP </th>
    799    <th> </th>
    800   </tr>
    801   <tr>
    802    <td>CVE-2016-3745</td>
    803    <td><a href="https://android.googlesource.com/platform/hardware/qcom/audio/+/073a80800f341325932c66818ce4302b312909a4">
    804        A-28173666</a>
    805    </td>
    806    <td></td>
    807    <td><a href="#all_nexus"> Nexus</a></td>
    808    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    809    <td>2016 4 10</td>
    810   </tr>
    811   <tr>
    812    <td>CVE-2016-3746</td>
    813    <td><a href="https://android.googlesource.com/platform/hardware/qcom/media/+/5b82f4f90c3d531313714df4b936f92fb0ff15cf">
    814        A-27890802</a>
    815    </td>
    816    <td></td>
    817    <td><a href="#all_nexus"> Nexus</a></td>
    818    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    819    <td>2016 3 27</td>
    820   </tr>
    821   <tr>
    822    <td>CVE-2016-3747</td>
    823    <td><a href="https://android.googlesource.com/platform/hardware/qcom/media/+/4ed06d14080d8667d5be14eed200e378cba78345">
    824        A-27903498</a>
    825    </td>
    826    <td></td>
    827    <td><a href="#all_nexus"> Nexus</a></td>
    828    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    829    <td>2016 3 28</td>
    830   </tr>
    831 </table>
    832 
    833 <h3 id="elevation-of-privilege-vulnerability-in-sockets">
    834    </h3>
    835 <p>         
    836      .
    837         
    838        
    839 .</p>
    840 
    841 <table>
    842   <col width="19%">
    843   <col width="16%">
    844   <col width="10%">
    845   <col width="19%">
    846   <col width="18%">
    847   <col width="16%">
    848   <tr>
    849    <th>CVE</th>
    850    <th></th>
    851    <th></th>
    852    <th> Nexus </th>
    853    <th> AOSP </th>
    854    <th> </th>
    855   </tr>
    856   <tr>
    857    <td>CVE-2016-3748</td>
    858    <td><a href="https://android.googlesource.com/platform/external/sepolicy/+/556bb0f55324e8839d7b735a0de9bc31028e839e">
    859        A-28171804</a>
    860    </td>
    861    <td></td>
    862    <td><a href="#all_nexus"> Nexus</a></td>
    863    <td>6.0, 6.0.1</td>
    864    <td>2016 4 13</td>
    865   </tr>
    866 </table>
    867 
    868 <h3 id="elevation-of-privilege-vulnerability-in-locksettingsservice">
    869 LockSettingsService   </h3>
    870 <p>LockSettingsService    
    871        
    872   .        
    873           .</p>
    874 
    875 <table>
    876   <col width="19%">
    877   <col width="16%">
    878   <col width="10%">
    879   <col width="19%">
    880   <col width="17%">
    881   <col width="17%">
    882   <tr>
    883    <th>CVE</th>
    884    <th></th>
    885    <th></th>
    886    <th> Nexus </th>
    887    <th> AOSP </th>
    888    <th> </th>
    889   </tr>
    890   <tr>
    891    <td>CVE-2016-3749</td>
    892    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/e83f0f6a5a6f35323f5367f99c8e287c440f33f5">
    893        A-28163930</a>
    894    </td>
    895    <td></td>
    896    <td><a href="#all_nexus"> Nexus</a></td>
    897    <td>6.0, 6.0.1</td>
    898    <td>Google </td>
    899   </tr>
    900 </table>
    901 
    902 <h3 id="elevation-of-privilege-vulnerability-in-framework-apis">
    903  API   </h3>
    904 <p>Parcels  API      
    905      
    906     .   
    907           
    908  .</p>
    909 
    910 <table>
    911   <col width="19%">
    912   <col width="16%">
    913   <col width="10%">
    914   <col width="19%">
    915   <col width="17%">
    916   <col width="17%">
    917   <tr>
    918    <th>CVE</th>
    919    <th></th>
    920    <th></th>
    921    <th> Nexus </th>
    922    <th> AOSP </th>
    923    <th> </th>
    924   </tr>
    925   <tr>
    926    <td>CVE-2016-3750</td>
    927    <td><a href="https://android.googlesource.com/platform/frameworks/native/+/54cb02ad733fb71b1bdf78590428817fb780aff8">
    928        A-28395952</a>
    929    </td>
    930    <td></td>
    931    <td><a href="#all_nexus"> Nexus</a></td>
    932    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
    933    <td>2015 12 16</td>
    934   </tr>
    935 </table>
    936 
    937 <h3 id="elevation-of-privilege-vulnerability-in-choosertarget-service">
    938 ChooserTarget    </h3>
    939 <p>ChooserTarget        
    940      
    941 .          
    942      .</p>
    943 
    944 <table>
    945   <col width="19%">
    946   <col width="16%">
    947   <col width="10%">
    948   <col width="19%">
    949   <col width="17%">
    950   <col width="17%">
    951   <tr>
    952    <th>CVE</th>
    953    <th></th>
    954    <th></th>
    955    <th> Nexus </th>
    956    <th> AOSP </th>
    957    <th> </th>
    958   </tr>
    959   <tr>
    960    <td>CVE-2016-3752</td>
    961    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/ddbf2db5b946be8fdc45c7b0327bf560b2a06988">
    962        A-28384423</a>
    963    </td>
    964    <td></td>
    965    <td><a href="#all_nexus"> Nexus</a></td>
    966    <td>6.0, 6.0.1</td>
    967    <td>Google </td>
    968   </tr>
    969 </table>
    970 
    971 <h3 id="information-disclosure-vulnerability-in-mediaserver">
    972     </h3>
    973 <p>        
    974          
    975   .        
    976     .</p>
    977 
    978 <table>
    979   <col width="19%">
    980   <col width="16%">
    981   <col width="10%">
    982   <col width="19%">
    983   <col width="18%">
    984   <col width="16%">
    985   <tr>
    986    <th>CVE</th>
    987    <th></th>
    988    <th></th>
    989    <th> Nexus </th>
    990    <th> AOSP </th>
    991    <th> </th>
    992   </tr>
    993   <tr>
    994    <td>CVE-2016-3753</td>
    995    <td>A-27210135</td>
    996    <td></td>
    997    <td>*</td>
    998    <td>4.4.4</td>
    999    <td>2016 2 15</td>
   1000   </tr>
   1001 </table>
   1002 <p>*  Nexus      
   1003    .</p>
   1004 
   1005 <h3 id="information-disclosure-vulnerability-in-openssl">
   1006 OpenSSL   </h3>
   1007 <p>OpenSSL       
   1008          
   1009   .        
   1010     .</p>
   1011 
   1012 <table>
   1013   <col width="19%">
   1014   <col width="16%">
   1015   <col width="10%">
   1016   <col width="19%">
   1017   <col width="18%">
   1018   <col width="16%">
   1019   <tr>
   1020    <th>CVE</th>
   1021    <th></th>
   1022    <th></th>
   1023    <th> Nexus </th>
   1024    <th> AOSP </th>
   1025    <th> </th>
   1026   </tr>
   1027   <tr>
   1028    <td>CVE-2016-2107</td>
   1029    <td>A-28550804</td>
   1030    <td></td>
   1031    <td>*</td>
   1032    <td>4.4.4, 5.0.2, 5.1.1</td>
   1033    <td>2016 4 13</td>
   1034   </tr>
   1035 </table>
   1036 <p>*  Nexus      
   1037    .</p>
   1038 
   1039 <h3 id="denial-of-service-vulnerability-in-mediaserver">
   1040    (DoS) </h3>
   1041 <p>         
   1042       .  
   1043         .</p>
   1044 
   1045 <table>
   1046   <col width="19%">
   1047   <col width="19%">
   1048   <col width="10%">
   1049   <col width="16%">
   1050   <col width="17%">
   1051   <col width="17%">
   1052   <tr>
   1053    <th>CVE</th>
   1054    <th></th>
   1055    <th></th>
   1056    <th> Nexus </th>
   1057    <th> AOSP </th>
   1058    <th> </th>
   1059   </tr>
   1060   <tr>
   1061    <td>CVE-2016-3754</td>
   1062    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/6fdee2a83432b3b150d6a34f231c4e2f7353c01e">
   1063        A-28615448</a>
   1064        [<a href="https://android.googlesource.com/platform/frameworks/av/+/e7142a0703bc93f75e213e96ebc19000022afed9">2</a>]
   1065    </td>
   1066    <td></td>
   1067    <td><a href="#all_nexus"> Nexus</a></td>
   1068    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1069    <td>2016 5 5</td>
   1070   </tr>
   1071   <tr>
   1072    <td>CVE-2016-3755</td>
   1073    <td><a href="https://android.googlesource.com/platform/external/libavc/+/d4841f1161bdb5e13cb19e81af42437a634dd6ef">
   1074        A-28470138</a>
   1075    </td>
   1076    <td></td>
   1077    <td><a href="#all_nexus"> Nexus</a></td>
   1078    <td>6.0, 6.0.1</td>
   1079    <td>2016 4 29</td>
   1080   </tr>
   1081   <tr>
   1082    <td>CVE-2016-3756</td>
   1083    <td><a href="https://android.googlesource.com/platform/external/tremolo/+/659030a2e80c38fb8da0a4eb68695349eec6778b">
   1084        A-28556125</a>
   1085    </td>
   1086    <td></td>
   1087    <td><a href="#all_nexus"> Nexus</a></td>
   1088    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1089    <td>Google </td>
   1090   </tr>
   1091 </table>
   1092 
   1093 <h3 id="denial-of-service-vulnerability-in-libc">
   1094 libc  (DoS) </h3>
   1095 <p>libc        
   1096       .  
   1097        .</p>
   1098 
   1099 <table>
   1100   <col width="19%">
   1101   <col width="16%">
   1102   <col width="10%">
   1103   <col width="19%">
   1104   <col width="17%">
   1105   <col width="17%">
   1106   <tr>
   1107    <th>CVE</th>
   1108    <th></th>
   1109    <th></th>
   1110    <th> Nexus </th>
   1111    <th> AOSP </th>
   1112    <th> </th>
   1113   </tr>
   1114   <tr>
   1115    <td>CVE-2016-3818</td>
   1116    <td>A-28740702</td>
   1117    <td></td>
   1118    <td>*</td>
   1119    <td>4.4.4</td>
   1120    <td>Google </td>
   1121   </tr>
   1122 </table>
   1123 <p>*  Nexus      
   1124    .</p>
   1125 
   1126 <h3 id="elevation-of-privilege-vulnerability-in-lsof">
   1127 lsof   </h3>
   1128 <p>lsof    
   1129          
   1130   .        
   1131  .</p>
   1132 
   1133 <table>
   1134   <col width="19%">
   1135   <col width="16%">
   1136   <col width="10%">
   1137   <col width="19%">
   1138   <col width="18%">
   1139   <col width="16%">
   1140   <tr>
   1141    <th>CVE</th>
   1142    <th></th>
   1143    <th></th>
   1144    <th> Nexus </th>
   1145    <th> AOSP </th>
   1146    <th> </th>
   1147   </tr>
   1148   <tr>
   1149    <td>CVE-2016-3757</td>
   1150    <td><a href="https://android.googlesource.com/platform/system/core/+/ae18eb014609948a40e22192b87b10efc680daa7">
   1151        A-28175237</a>
   1152    </td>
   1153    <td></td>
   1154    <td><a href="#all_nexus"> Nexus</a></td>
   1155    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1156    <td>2016 4 11</td>
   1157   </tr>
   1158 </table>
   1159 
   1160 <h3 id="elevation-of-privilege-vulnerability-in-dexclassloader">
   1161 DexClassLoader   </h3>
   1162 <p>DexClassLoader       
   1163         
   1164 .        
   1165  .</p>
   1166 
   1167 <table>
   1168   <col width="19%">
   1169   <col width="16%">
   1170   <col width="10%">
   1171   <col width="19%">
   1172   <col width="17%">
   1173   <col width="17%">
   1174   <tr>
   1175    <th>CVE</th>
   1176    <th></th>
   1177    <th></th>
   1178    <th> Nexus </th>
   1179    <th> AOSP </th>
   1180    <th> </th>
   1181   </tr>
   1182   <tr>
   1183    <td>CVE-2016-3758</td>
   1184    <td><a href="https://android.googlesource.com/platform/dalvik/+/338aeaf28e9981c15d0673b18487dba61eb5447c">
   1185        A-27840771</a>
   1186    </td>
   1187    <td></td>
   1188    <td><a href="#all_nexus"> Nexus</a></td>
   1189    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1190    <td>Google </td>
   1191   </tr>
   1192 </table>
   1193 
   1194 <h3 id="elevation-of-privilege-vulnerability-in-framework-apis-2">
   1195  API   </h3>
   1196 <p> API      
   1197       
   1198   .    
   1199        
   1200     .</p>
   1201 
   1202 <table>
   1203   <col width="19%">
   1204   <col width="16%">
   1205   <col width="10%">
   1206   <col width="19%">
   1207   <col width="17%">
   1208   <col width="17%">
   1209   <tr>
   1210    <th>CVE</th>
   1211    <th></th>
   1212    <th></th>
   1213    <th> Nexus </th>
   1214    <th> AOSP </th>
   1215    <th> </th>
   1216   </tr>
   1217   <tr>
   1218    <td>CVE-2016-3759</td>
   1219    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/9b8c6d2df35455ce9e67907edded1e4a2ecb9e28">
   1220        A-28406080</a>
   1221    </td>
   1222    <td></td>
   1223    <td><a href="#all_nexus"> Nexus</a></td>
   1224    <td>5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1225    <td>Google </td>
   1226   </tr>
   1227 </table>
   1228 
   1229 <h3 id="elevation-of-privilege-vulnerability-in-bluetooth">
   1230    </h3>
   1231 <p>       
   1232        
   1233 .        
   1234        .</p>
   1235 
   1236 <table>
   1237   <col width="19%">
   1238   <col width="16%">
   1239   <col width="10%">
   1240   <col width="19%">
   1241   <col width="18%">
   1242   <col width="16%">
   1243   <tr>
   1244    <th>CVE</th>
   1245    <th></th>
   1246    <th></th>
   1247    <th> Nexus </th>
   1248    <th> AOSP </th>
   1249    <th> </th>
   1250   </tr>
   1251   <tr>
   1252    <td>CVE-2016-3760</td>
   1253    <td><a href="https://android.googlesource.com/platform/hardware/libhardware/+/8b3d5a64c3c8d010ad4517f652731f09107ae9c5">A-27410683</a>
   1254 [<a href="https://android.googlesource.com/platform/system/bt/+/37c88107679d36c419572732b4af6e18bb2f7dce">2</a>]
   1255 [<a href="https://android.googlesource.com/platform/packages/apps/Bluetooth/+/122feb9a0b04290f55183ff2f0384c6c53756bd8">3</a>]
   1256    </td>
   1257    <td></td>
   1258    <td><a href="#all_nexus"> Nexus</a></td>
   1259    <td>5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1260    <td>2016 2 29</td>
   1261   </tr>
   1262 </table>
   1263 
   1264 <h3 id="elevation-of-privilege-vulnerability-in-nfc">
   1265 NFC   </h3>
   1266 <p>NFC        
   1267      .  
   1268           
   1269   .</p>
   1270 
   1271 <table>
   1272   <col width="19%">
   1273   <col width="16%">
   1274   <col width="10%">
   1275   <col width="19%">
   1276   <col width="18%">
   1277   <col width="16%">
   1278   <tr>
   1279    <th>CVE</th>
   1280    <th></th>
   1281    <th></th>
   1282    <th> Nexus </th>
   1283    <th> AOSP </th>
   1284    <th> </th>
   1285   </tr>
   1286   <tr>
   1287    <td>CVE-2016-3761</td>
   1288    <td><a href="https://android.googlesource.com/platform/packages/apps/Nfc/+/9ea802b5456a36f1115549b645b65c791eff3c2c">
   1289        A-28300969</a>
   1290    </td>
   1291    <td></td>
   1292    <td><a href="#all_nexus"> Nexus</a></td>
   1293    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1294    <td>2016 4 20</td>
   1295   </tr>
   1296 </table>
   1297 
   1298 <h3 id="elevation-of-privilege-vulnerability-in-sockets-2">
   1299    </h3>
   1300 <p>       
   1301         
   1302     .   
   1303            
   1304   .</p>
   1305 
   1306 <table>
   1307   <col width="19%">
   1308   <col width="16%">
   1309   <col width="10%">
   1310   <col width="19%">
   1311   <col width="18%">
   1312   <col width="16%">
   1313   <tr>
   1314    <th>CVE</th>
   1315    <th></th>
   1316    <th></th>
   1317    <th> Nexus </th>
   1318    <th> AOSP </th>
   1319    <th> </th>
   1320   </tr>
   1321   <tr>
   1322    <td>CVE-2016-3762</td>
   1323    <td><a href="https://android.googlesource.com/platform/external/sepolicy/+/abf0663ed884af7bc880a05e9529e6671eb58f39">
   1324        A-28612709</a>
   1325    </td>
   1326    <td></td>
   1327    <td><a href="#all_nexus"> Nexus</a></td>
   1328    <td>5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1329    <td>2016 4 21</td>
   1330   </tr>
   1331 </table>
   1332 
   1333 <h3 id="information-disclosure-vulnerability-in-proxy-auto-config">
   1334      </h3>
   1335 <p>         
   1336        .             .</p>
   1337 
   1338 <table>
   1339   <col width="19%">
   1340   <col width="16%">
   1341   <col width="10%">
   1342   <col width="19%">
   1343   <col width="18%">
   1344   <col width="16%">
   1345   <tr>
   1346    <th>CVE</th>
   1347    <th></th>
   1348    <th></th>
   1349    <th> Nexus </th>
   1350    <th> AOSP </th>
   1351    <th> </th>
   1352   </tr>
   1353   <tr>
   1354    <td>CVE-2016-3763</td>
   1355    <td><a href="https://android.googlesource.com/platform/frameworks/base/+/ec2fc50d202d975447211012997fe425496c849c">
   1356        A-27593919</a>
   1357    </td>
   1358    <td></td>
   1359    <td><a href="#all_nexus"> Nexus</a></td>
   1360    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1361    <td>2016 3 10</td>
   1362   </tr>
   1363 </table>
   1364 
   1365 <h3 id="information-disclosure-vulnerability-in-mediaserver-2">
   1366     </h3>
   1367 <p>          
   1368   .         
   1369    .</p>
   1370 
   1371 <table>
   1372   <col width="19%">
   1373   <col width="16%">
   1374   <col width="10%">
   1375   <col width="19%">
   1376   <col width="18%">
   1377   <col width="16%">
   1378   <tr>
   1379    <th>CVE</th>
   1380    <th></th>
   1381    <th></th>
   1382    <th> Nexus </th>
   1383    <th> AOSP </th>
   1384    <th> </th>
   1385   </tr>
   1386   <tr>
   1387    <td>CVE-2016-3764</td>
   1388    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/daef4327fe0c75b0a90bb8627458feec7a301e1f">
   1389        A-28377502</a>
   1390    </td>
   1391    <td></td>
   1392    <td><a href="#all_nexus"> Nexus</a></td>
   1393    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1394    <td>2016 4 25</td>
   1395   </tr>
   1396   <tr>
   1397    <td>CVE-2016-3765</td>
   1398    <td><a href="https://android.googlesource.com/platform/external/libmpeg2/+/d1c775d1d8d2ed117d1e026719b7f9f089716597">
   1399        A-28168413</a>
   1400    </td>
   1401    <td></td>
   1402    <td><a href="#all_nexus"> Nexus</a></td>
   1403    <td>6.0, 6.0.1</td>
   1404    <td>2016 4 8</td>
   1405   </tr>
   1406 </table>
   1407 
   1408 <h3 id="denial-of-service-vulnerability-in-mediaserver-2">
   1409    (DoS) </h3>
   1410 <p>         
   1411       .  
   1412        .</p>
   1413 
   1414 <table>
   1415   <col width="19%">
   1416   <col width="16%">
   1417   <col width="10%">
   1418   <col width="19%">
   1419   <col width="18%">
   1420   <col width="16%">
   1421   <tr>
   1422    <th>CVE</th>
   1423    <th></th>
   1424    <th></th>
   1425    <th> Nexus </th>
   1426    <th> AOSP </th>
   1427    <th> </th>
   1428   </tr>
   1429   <tr>
   1430    <td>CVE-2016-3766</td>
   1431    <td><a href="https://android.googlesource.com/platform/frameworks/av/+/6fdee2a83432b3b150d6a34f231c4e2f7353c01e">
   1432        A-28471206</a>
   1433        [<a href="https://android.googlesource.com/platform/frameworks/av/+/e7142a0703bc93f75e213e96ebc19000022afed9">2</a>]
   1434    </td>
   1435    <td></td>
   1436    <td><a href="#all_nexus"> Nexus</a></td>
   1437    <td>4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1</td>
   1438    <td>2016 4 29</td>
   1439   </tr>
   1440 </table>
   1441 
   1442 <h2 id="2016-07-05_details">2016-07-05    </h2>
   1443 <p>   <a href="2016-07-05_summary">2016-07-05   
   1444  </a>    
   1445 .   ,   
   1446 CVE,  , ,  Nexus ,
   1447  AOSP ( ),      .  
   1448 AOSP         ID
   1449 .        
   1450   ID    .</p>
   1451 
   1452 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-gpu-driver">
   1453 Qualcomm GPU    </h3>
   1454 <p>Qualcomm GPU     
   1455        
   1456   .   
   1457         ,
   1458         .</p>
   1459 
   1460 <table>
   1461   <col width="19%">
   1462   <col width="16%">
   1463   <col width="10%">
   1464   <col width="27%">
   1465   <col width="16%">
   1466   <tr>
   1467    <th>CVE</th>
   1468    <th></th>
   1469    <th></th>
   1470    <th> Nexus </th>
   1471    <th> </th>
   1472   </tr>
   1473   <tr>
   1474    <td>CVE-2016-2503</td>
   1475    <td>A-28084795*
   1476       QC-CR1006067</td>
   1477    <td></td>
   1478    <td>Nexus 5X, Nexus 6P</td>
   1479    <td>2016 4 5</td>
   1480   </tr>
   1481   <tr>
   1482    <td>CVE-2016-2067</td>
   1483    <td>A-28305757
   1484       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.18/commit/?id=410cfa95f0a1cf58819cbfbd896f9aa45b004ac0">
   1485       QC-CR988993</a></td>
   1486    <td></td>
   1487    <td>Nexus 5X, Nexus 6, Nexus 6P</td>
   1488    <td>2016 4 20</td>
   1489   </tr>
   1490 </table>
   1491 <p>*         . 
   1492 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1493   .</p>
   1494 
   1495 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-wi-fi-driver">
   1496 MediaTek Wi-Fi    </h3>
   1497 <p>MediaTek Wi-Fi        
   1498        .   
   1499         ,
   1500         .</p>
   1501 
   1502 <table>
   1503   <col width="19%">
   1504   <col width="20%">
   1505   <col width="10%">
   1506   <col width="23%">
   1507   <col width="16%">
   1508   <tr>
   1509    <th>CVE</th>
   1510    <th></th>
   1511    <th></th>
   1512    <th> Nexus </th>
   1513    <th> </th>
   1514   </tr>
   1515   <tr>
   1516    <td>CVE-2016-3767</td>
   1517    <td>A-28169363*
   1518        <br>M-ALPS02689526</td>
   1519    <td></td>
   1520    <td>Android One</td>
   1521    <td>2016 4 6</td>
   1522   </tr>
   1523 </table>
   1524 <p>*         . 
   1525 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1526   .</p>
   1527 
   1528 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-performance-component">
   1529 Qualcomm     </h3>
   1530 <p>Qualcomm      
   1531        
   1532   .   
   1533         ,
   1534         .</p>
   1535 
   1536 <table>
   1537   <col width="19%">
   1538   <col width="16%">
   1539   <col width="10%">
   1540   <col width="27%">
   1541   <col width="16%">
   1542   <tr>
   1543    <th>CVE</th>
   1544    <th></th>
   1545    <th></th>
   1546    <th> Nexus </th>
   1547    <th> </th>
   1548   </tr>
   1549   <tr>
   1550    <td>CVE-2016-3768</td>
   1551    <td>A-28172137*
   1552        QC-CR1010644</td>
   1553    <td></td>
   1554    <td>Nexus 5, Nexus 6, Nexus 5X, Nexus 6P, Nexus 7(2013)</td>
   1555    <td>2016 4 9</td>
   1556   </tr>
   1557 </table>
   1558 <p>*         . 
   1559 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1560   .</p>
   1561 
   1562 <h3 id="elevation-of-privilege-vulnerability-in-nvidia-video-driver">
   1563 NVIDIA     </h3>
   1564 <p>NVIDIA      
   1565        
   1566   .   
   1567         ,
   1568         .</p>
   1569 
   1570 <table>
   1571   <col width="19%">
   1572   <col width="20%">
   1573   <col width="10%">
   1574   <col width="23%">
   1575   <col width="16%">
   1576   <tr>
   1577    <th>CVE</th>
   1578    <th></th>
   1579    <th></th>
   1580    <th> Nexus </th>
   1581    <th> </th>
   1582   </tr>
   1583   <tr>
   1584    <td>CVE-2016-3769</td>
   1585    <td>A-28376656*<br>
   1586        N-CVE20163769</td>
   1587    <td></td>
   1588    <td>Nexus 9</td>
   1589    <td>2016 4 18</td>
   1590   </tr>
   1591 </table>
   1592 <p>*       . 
   1593 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1594   .</p>
   1595 
   1596 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-drivers-device-specific">
   1597 MediaTek    ( )</h3>
   1598 <p> MediaTek       
   1599        
   1600 .   
   1601         ,
   1602         .</p>
   1603 
   1604 <table>
   1605   <col width="19%">
   1606   <col width="20%">
   1607   <col width="10%">
   1608   <col width="23%">
   1609   <col width="16%">
   1610   <tr>
   1611    <th>CVE</th>
   1612    <th></th>
   1613    <th></th>
   1614    <th> Nexus </th>
   1615    <th> </th>
   1616   </tr>
   1617   <tr>
   1618    <td>CVE-2016-3770</td>
   1619    <td>A-28346752*<br>
   1620        M-ALPS02703102</td>
   1621    <td></td>
   1622    <td>Android One</td>
   1623    <td>2016 4 22</td>
   1624   </tr>
   1625   <tr>
   1626    <td>CVE-2016-3771</td>
   1627    <td>A-29007611*<br>
   1628        M-ALPS02703102</td>
   1629    <td></td>
   1630    <td>Android One</td>
   1631    <td>2016 4 22</td>
   1632   </tr>
   1633   <tr>
   1634    <td>CVE-2016-3772</td>
   1635    <td>A-29008188*<br>
   1636        M-ALPS02703102</td>
   1637    <td></td>
   1638    <td>Android One</td>
   1639    <td>2016 4 22</td>
   1640   </tr>
   1641   <tr>
   1642    <td>CVE-2016-3773</td>
   1643    <td>A-29008363*<br>
   1644        M-ALPS02703102</td>
   1645    <td></td>
   1646    <td>Android One</td>
   1647    <td>2016 4 22</td>
   1648   </tr>
   1649   <tr>
   1650    <td>CVE-2016-3774</td>
   1651    <td>A-29008609*<br>
   1652        M-ALPS02703102</td>
   1653    <td></td>
   1654    <td>Android One</td>
   1655    <td>2016 4 22</td>
   1656   </tr>
   1657 </table>
   1658 <p>*       . 
   1659 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1660   .</p>
   1661 
   1662 <h3 id="elevation-of-privilege-vulnerability-in-kernel-file-system">
   1663      </h3>
   1664 <p>         
   1665       
   1666 .   
   1667         ,
   1668         .</p>
   1669 
   1670 <table>
   1671   <col width="19%">
   1672   <col width="16%">
   1673   <col width="10%">
   1674   <col width="27%">
   1675   <col width="16%">
   1676   <tr>
   1677    <th>CVE</th>
   1678    <th></th>
   1679    <th></th>
   1680    <th> Nexus </th>
   1681    <th> </th>
   1682   </tr>
   1683   <tr>
   1684    <td>CVE-2016-3775</td>
   1685    <td>A-28588279*</td>
   1686    <td></td>
   1687    <td>Nexus 5X, Nexus 6, Nexus 6P  Nexus Player, Pixel C</td>
   1688    <td>2016 5 4</td>
   1689   </tr>
   1690 </table>
   1691 <p>*       . 
   1692 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1693   .</p>
   1694 
   1695 <h3 id="elevation-of-privilege-vulnerability-in-usb-driver">
   1696 USB    </h3>
   1697 <p>USB     
   1698        
   1699   .   
   1700         ,
   1701         .</p>
   1702 
   1703 <table>
   1704   <col width="19%">
   1705   <col width="16%">
   1706   <col width="10%">
   1707   <col width="27%">
   1708   <col width="16%">
   1709   <tr>
   1710    <th>CVE</th>
   1711    <th></th>
   1712    <th></th>
   1713    <th> Nexus </th>
   1714    <th> </th>
   1715   </tr>
   1716   <tr>
   1717    <td>CVE-2015-8816</td>
   1718    <td>A-28712303*</td>
   1719    <td></td>
   1720    <td>Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013), Nexus 9, Nexus Player, Pixel C</td>
   1721    <td>2016 5 4</td>
   1722   </tr>
   1723 </table>
   1724 <p>*       . 
   1725 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   1726   .</p>
   1727 
   1728 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-components">
   1729 Qualcomm    </h3>
   1730 <p>  ,  ,  , ,
   1731       Qualcomm 
   1732      .</p>
   1733 <p>        
   1734        
   1735 ,     
   1736    .</p>
   1737 
   1738 <table>
   1739   <col width="19%">
   1740   <col width="20%">
   1741   <col width="10%">
   1742   <col width="23%">
   1743   <col width="16%">
   1744   <tr>
   1745    <th>CVE</th>
   1746    <th></th>
   1747    <th>*</th>
   1748    <th> Nexus </th>
   1749    <th> </th>
   1750   </tr>
   1751   <tr>
   1752    <td>CVE-2014-9795</td>
   1753    <td>A-28820720<br>
   1754       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=ce2a0ea1f14298abc83729f3a095adab43342342">QC-CR681957</a>
   1755       [<a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=fc3b31f81a1c128c2bcc745564a075022cd72a2e">2</a>]
   1756    </td>
   1757    <td></td>
   1758    <td>Nexus 5</td>
   1759    <td>2014 8 8</td>
   1760   </tr>
   1761   <tr>
   1762    <td>CVE-2014-9794</td>
   1763    <td>A-28821172<br>
   1764       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=f39085971c8c4e36cadbf8a72aabe6c7ff538ffa">QC-CR646385</a>
   1765    </td>
   1766    <td></td>
   1767    <td>Nexus 7(2013)</td>
   1768    <td>2014 8 8</td>
   1769   </tr>
   1770   <tr>
   1771    <td>CVE-2015-8892</td>
   1772    <td>A-28822807<br>
   1773       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=fae606b9dd92c021e2419369975264f24f60db23">QC-CR902998</a>
   1774    </td>
   1775    <td></td>
   1776    <td>Nexus 5X, Nexus 6P</td>
   1777    <td>2015 12 30</td>
   1778   </tr>
   1779   <tr>
   1780    <td>CVE-2014-9781</td>
   1781    <td>A-28410333<br>
   1782       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/drivers/video/?h=LA.BF.1.1.3_rb1.12&id=a2b5237ad265ec634489c8b296d870827b2a1b13&context=20&ignorews=0&dt=0">QC-CR556471</a>
   1783    </td>
   1784    <td></td>
   1785    <td>Nexus 7(2013)</td>
   1786    <td>2014 2 6</td>
   1787   </tr>
   1788   <tr>
   1789    <td>CVE-2014-9786</td>
   1790    <td>A-28557260<br>
   1791       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/patch/?id=2fb303d9c6ca080f253b10ed9384293ca69ad32b">QC-CR545979</a></td>
   1792    <td></td>
   1793    <td>Nexus 5, Nexus 7(2013)</td>
   1794    <td>2014 3 13</td>
   1795   </tr>
   1796   <tr>
   1797    <td>CVE-2014-9788</td>
   1798    <td>A-28573112<br>
   1799       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=73bfc22aa70cc0b7e6709381125a0a42aa72a4f2">QC-CR548872</a></td>
   1800    <td></td>
   1801    <td>Nexus 5</td>
   1802    <td>2014 3 13</td>
   1803   </tr>
   1804   <tr>
   1805    <td>CVE-2014-9779</td>
   1806    <td>A-28598347<br>
   1807       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c?h=LA.BF.1.1.3_rb1.12&id=0b5f49b360afdebf8ef55df1e48ec141b3629621">QC-CR548679</a></td>
   1808    <td></td>
   1809    <td>Nexus 5</td>
   1810    <td>2014 3 13</td>
   1811   </tr>
   1812   <tr>
   1813    <td>CVE-2014-9780</td>
   1814    <td>A-28602014<br>
   1815       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=b5bb13e1f738f90df11e0c17f843c73999a84a54">QC-CR542222</a></td>
   1816    <td></td>
   1817    <td>Nexus 5, Nexus 5X, Nexus 6P</td>
   1818    <td>2014 3 13</td>
   1819   </tr>
   1820   <tr>
   1821    <td>CVE-2014-9789</td>
   1822    <td>A-28749392<br>
   1823       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=5720ed5c3a786e3ba0a2428ac45da5d7ec996b4e">QC-CR556425</a></td>
   1824    <td></td>
   1825    <td>Nexus 5</td>
   1826    <td>2014 3 13</td>
   1827   </tr>
   1828   <tr>
   1829    <td>CVE-2014-9793</td>
   1830    <td>A-28821253<br>
   1831       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=0dcccecc4a6a9a9b3314cb87b2be8b52df1b7a81">QC-CR580567</a></td>
   1832    <td></td>
   1833    <td>Nexus 7(2013)</td>
   1834    <td>2014 3 13</td>
   1835   </tr>
   1836   <tr>
   1837    <td>CVE-2014-9782</td>
   1838    <td>A-28431531<br>
   1839       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/patch/?id=2e57a46ab2ba7299d99d9cdc1382bd1e612963fb">QC-CR511349</a></td>
   1840    <td></td>
   1841    <td>Nexus 5, Nexus 7(2013)</td>
   1842    <td>2014 3 31</td>
   1843   </tr>
   1844   <tr>
   1845    <td>CVE-2014-9783</td>
   1846    <td>A-28441831<br>
   1847       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=2b1050b49a9a5f7bb57006648d145e001a3eaa8b">QC-CR511382</a>
   1848       [<a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=a7502f4f801bb95bff73617309835bb7a016cde5">2</a>]</td>
   1849    <td></td>
   1850    <td>Nexus 7(2013)</td>
   1851    <td>2014 3 31</td>
   1852   </tr>
   1853   <tr>
   1854    <td>CVE-2014-9785</td>
   1855    <td>A-28469042<br>
   1856       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=b4338420db61f029ca6713a89c41b3a5852b20ce">QC-CR545747</a></td>
   1857    <td></td>
   1858    <td>Nexus 7(2013)</td>
   1859    <td>2014 3 31</td>
   1860   </tr>
   1861   <tr>
   1862    <td>CVE-2014-9787</td>
   1863    <td>A-28571496<br>
   1864       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=528400ae4cba715f6c9ff4a2657dafd913f30b8b">QC-CR545764</a></td>
   1865    <td></td>
   1866    <td>Nexus 7(2013)</td>
   1867    <td>2014 3 31</td>
   1868   </tr>
   1869   <tr>
   1870    <td>CVE-2014-9784</td>
   1871    <td>A-28442449<br>
   1872       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=36503d639cedcc73880974ed92132247576e72ba">QC-CR585147</a></td>
   1873    <td></td>
   1874    <td>Nexus 5, Nexus 7(2013)</td>
   1875    <td>2014 4 30</td>
   1876   </tr>
   1877   <tr>
   1878    <td>CVE-2014-9777</td>
   1879    <td>A-28598501<br>
   1880       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=17bfaf64ad503d2e6607d2d3e0956f25bf07eb43">QC-CR563654</a></td>
   1881    <td></td>
   1882    <td>Nexus 5, Nexus 7(2013)</td>
   1883    <td>2014 4 30</td>
   1884   </tr>
   1885   <tr>
   1886    <td>CVE-2014-9778</td>
   1887    <td>A-28598515<br>
   1888       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?id=af85054aa6a1bcd38be2354921f2f80aef1440e5">QC-CR563694</a></td>
   1889    <td></td>
   1890    <td>Nexus 5, Nexus 7(2013)</td>
   1891    <td>2014 4 30</td>
   1892   </tr>
   1893   <tr>
   1894    <td>CVE-2014-9790</td>
   1895    <td>A-28769136<br>
   1896       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?h=LA.BF.1.1.3_rb1.12&id=6ed921bda8cbb505e8654dfc1095185b0bccc38e">QC-CR545716</a>
   1897       [<a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit?h=LA.BF.1.1.3_rb1.12&id=9bc30c0d1832f7dd5b6fa10d5e48a29025176569">2</a>]</td>
   1898    <td></td>
   1899    <td>Nexus 5, Nexus 7(2013)</td>
   1900    <td>2014 4 30</td>
   1901   </tr>
   1902   <tr>
   1903    <td>CVE-2014-9792</td>
   1904    <td>A-28769399<br>
   1905       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=a3e3dd9fc0a2699ae053ffd3efb52cdc73ad94cd">QC-CR550606</a></td>
   1906    <td></td>
   1907    <td>Nexus 5</td>
   1908    <td>2014 4 30</td>
   1909   </tr>
   1910   <tr>
   1911    <td>CVE-2014-9797</td>
   1912    <td>A-28821090<br>
   1913       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=3312737f3e1ec84dd67ee0622c7dd031083f71a4">QC-CR674071</a></td>
   1914    <td></td>
   1915    <td>Nexus 5</td>
   1916    <td>2014 7 3</td>
   1917   </tr>
   1918   <tr>
   1919    <td>CVE-2014-9791</td>
   1920    <td>A-28803396<br>
   1921       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm/commit/?h=LA.BF.1.1.3_rb1.12&id=9aabfc9e7775abbbcf534cdecccc4f12ee423b27">QC-CR659364</a></td>
   1922    <td></td>
   1923    <td>Nexus 7(2013)</td>
   1924    <td>2014 8 29</td>
   1925   </tr>
   1926   <tr>
   1927    <td>CVE-2014-9796</td>
   1928    <td>A-28820722<br>
   1929       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=2e21b3a57cac7fb876bcf43244d7cc3dc1f6030d">QC-CR684756</a></td>
   1930    <td></td>
   1931    <td>Nexus 5, Nexus 7(2013)</td>
   1932    <td>2014 9 30</td>
   1933   </tr>
   1934   <tr>
   1935    <td>CVE-2014-9800</td>
   1936    <td>A-28822150<br>
   1937       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=6390f200d966dc13cf61bb5abbe3110447ca82b5">QC-CR692478</a></td>
   1938    <td></td>
   1939    <td>Nexus 5, Nexus 7(2013)</td>
   1940    <td>2014 10 31</td>
   1941   </tr>
   1942   <tr>
   1943    <td>CVE-2014-9799</td>
   1944    <td>A-28821731<br>
   1945       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=c2119f1fba46f3b6e153aa018f15ee46fe6d5b76">QC-CR691916</a></td>
   1946    <td></td>
   1947    <td>Nexus 5, Nexus 7(2013)</td>
   1948    <td>2014 10 31</td>
   1949   </tr>
   1950   <tr>
   1951    <td>CVE-2014-9801</td>
   1952    <td>A-28822060<br>
   1953       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=cf8f5a105bafda906ccb7f149d1a5b8564ce20c0">QC-CR705078</a></td>
   1954    <td></td>
   1955    <td>Nexus 5</td>
   1956    <td>2014 11 28</td>
   1957   </tr>
   1958   <tr>
   1959    <td>CVE-2014-9802</td>
   1960    <td>A-28821965<br>
   1961       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=222e0ec9bc755bfeaa74f9a0052b7c709a4ad054">QC-CR705108</a></td>
   1962    <td></td>
   1963    <td>Nexus 5, Nexus 7(2013)</td>
   1964    <td>2014 12 31</td>
   1965   </tr>
   1966   <tr>
   1967    <td>CVE-2015-8891</td>
   1968    <td>A-28842418<br>
   1969       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=4f829bb52d0338c87bc6fbd0414b258f55cc7c62">QC-CR813930</a></td>
   1970    <td></td>
   1971    <td>Nexus 5, Nexus 7(2013)</td>
   1972    <td>2015 5 29</td>
   1973   </tr>
   1974   <tr>
   1975    <td>CVE-2015-8888</td>
   1976    <td>A-28822465<br>
   1977       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=1321f34f1ebcff61ad7e65e507cfd3e9028af19b">QC-CR813933</a></td>
   1978    <td></td>
   1979    <td>Nexus 5</td>
   1980    <td>2015 6 30</td>
   1981   </tr>
   1982   <tr>
   1983    <td>CVE-2015-8889</td>
   1984    <td>A-28822677<br>
   1985       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/lk/commit/?id=fa774e023554427ee14d7a49181e9d4afbec035e">QC-CR804067</a></td>
   1986    <td></td>
   1987    <td>Nexus 6P</td>
   1988    <td>2015 6 30</td>
   1989   </tr>
   1990   <tr>
   1991    <td>CVE-2015-8890</td>
   1992    <td>A-28822878<br>
   1993       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=e22aca36da2bb6f5016f3c885eb8c8ff85c115e4">QC-CR823461</a></td>
   1994    <td></td>
   1995    <td>Nexus 5, Nexus 7(2013)</td>
   1996    <td>2015 8 19</td>
   1997   </tr>
   1998 </table>
   1999 <p>*     Qualcomm  .</p>
   2000 
   2001 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-usb-driver">
   2002 Qualcomm USB    </h3>
   2003 <p>Qualcomm USB     
   2004        
   2005   .        
   2006    .</p>
   2007 
   2008 <table>
   2009   <col width="19%">
   2010   <col width="16%">
   2011   <col width="10%">
   2012   <col width="27%">
   2013   <col width="16%">
   2014   <tr>
   2015    <th>CVE</th>
   2016    <th></th>
   2017    <th></th>
   2018    <th> Nexus </th>
   2019    <th> </th>
   2020   </tr>
   2021   <tr>
   2022    <td>CVE-2016-2502</td>
   2023    <td>A-27657963
   2024       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=0bc45d7712eabe315ce8299a49d16433c3801156">QC-CR997044</a></td>
   2025    <td></td>
   2026    <td>Nexus 5X, Nexus 6P</td>
   2027    <td>2016 3 11</td>
   2028   </tr>
   2029 </table>
   2030 
   2031 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-wi-fi-driver">
   2032 Qualcomm Wi-Fi    </h3>
   2033 <p>Qualcomm Wi-Fi     
   2034          
   2035 .        
   2036    .</p>
   2037 
   2038 <table>
   2039   <col width="19%">
   2040   <col width="16%">
   2041   <col width="10%">
   2042   <col width="27%">
   2043   <col width="16%">
   2044   <tr>
   2045    <th>CVE</th>
   2046    <th></th>
   2047    <th></th>
   2048    <th> Nexus </th>
   2049    <th> </th>
   2050   </tr>
   2051   <tr>
   2052    <td>CVE-2016-3792</td>
   2053    <td>A-27725204
   2054       <a href="https://us.codeaurora.org/cgit/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=28d4f0c1f712bffb4aa5b47f06e97d5a9fa06d29">QC-CR561022</a></td>
   2055    <td></td>
   2056    <td>Nexus 7(2013)</td>
   2057    <td>2016 3 17</td>
   2058   </tr>
   2059 </table>
   2060 
   2061 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-camera-driver">
   2062 Qualcomm     </h3>
   2063 <p>Qualcomm      
   2064        
   2065   .        
   2066    .</p>
   2067 
   2068 <table>
   2069   <col width="19%">
   2070   <col width="16%">
   2071   <col width="10%">
   2072   <col width="27%">
   2073   <col width="16%">
   2074   <tr>
   2075    <th>CVE</th>
   2076    <th></th>
   2077    <th></th>
   2078    <th> Nexus </th>
   2079    <th> </th>
   2080   </tr>
   2081   <tr>
   2082    <td>CVE-2016-2501</td>
   2083    <td>A-27890772*
   2084        QC-CR1001092</td>
   2085    <td></td>
   2086    <td>Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013)</td>
   2087    <td>2016 3 27</td>
   2088   </tr>
   2089 </table>
   2090 <p>*       . 
   2091 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2092   .</p>
   2093 
   2094 <h3 id="elevation-of-privilege-vulnerability-in-nvidia-camera-driver">
   2095 NVIDIA     </h3>
   2096 <p>NVIDIA      
   2097        
   2098   .        
   2099    .</p>
   2100 
   2101 <table>
   2102   <col width="19%">
   2103   <col width="20%">
   2104   <col width="10%">
   2105   <col width="23%">
   2106   <col width="16%">
   2107   <tr>
   2108    <th>CVE</th>
   2109    <th></th>
   2110    <th></th>
   2111    <th> Nexus </th>
   2112    <th> </th>
   2113   </tr>
   2114   <tr>
   2115    <td>CVE-2016-3793</td>
   2116    <td>A-28026625*<br>
   2117        N-CVE20163793</td>
   2118    <td></td>
   2119    <td>Nexus 9</td>
   2120    <td>2016 4 5</td>
   2121   </tr>
   2122 </table>
   2123 <p>*       . 
   2124 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2125   .</p>
   2126 
   2127 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-power-driver">
   2128 MediaTek     </h3>
   2129 <p>MediaTek      
   2130       
   2131    .        
   2132    .</p>
   2133 
   2134 <table>
   2135   <col width="19%">
   2136   <col width="20%">
   2137   <col width="10%">
   2138   <col width="23%">
   2139   <col width="16%">
   2140   <tr>
   2141    <th>CVE</th>
   2142    <th></th>
   2143    <th></th>
   2144    <th> Nexus </th>
   2145    <th> </th>
   2146   </tr>
   2147   <tr>
   2148    <td>CVE-2016-3795</td>
   2149    <td>A-28085222*<br>
   2150        M-ALPS02677244</td>
   2151    <td></td>
   2152    <td>Android One</td>
   2153    <td>2016 4 7</td>
   2154   </tr>
   2155   <tr>
   2156    <td>CVE-2016-3796</td>
   2157    <td>A-29008443*<br>
   2158        M-ALPS02677244</td>
   2159    <td></td>
   2160    <td>Android One</td>
   2161    <td>2016 4 7</td>
   2162   </tr>
   2163 </table>
   2164 <p>*       . 
   2165 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2166   .</p>
   2167 
   2168 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-wi-fi-driver-2">
   2169 Qualcomm Wi-Fi    </h3>
   2170 <p>Qualcomm Wi-Fi     
   2171          
   2172 .        
   2173    .</p>
   2174 
   2175 <table>
   2176   <col width="19%">
   2177   <col width="16%">
   2178   <col width="10%">
   2179   <col width="27%">
   2180   <col width="16%">
   2181   <tr>
   2182    <th>CVE</th>
   2183    <th></th>
   2184    <th></th>
   2185    <th> Nexus </th>
   2186    <th> </th>
   2187   </tr>
   2188   <tr>
   2189    <td>CVE-2016-3797</td>
   2190    <td>A-28085680*
   2191        QC-CR1001450</td>
   2192    <td></td>
   2193    <td>Nexus 5X</td>
   2194    <td>2016 4 7</td>
   2195   </tr>
   2196 </table>
   2197 <p>*       . 
   2198 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2199   .</p>
   2200 
   2201 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-hardware-sensor-driver">
   2202 MediaTek      </h3>
   2203 <p>MediaTek       
   2204        
   2205   .        
   2206    .</p>
   2207 
   2208 <table>
   2209   <col width="19%">
   2210   <col width="20%">
   2211   <col width="10%">
   2212   <col width="23%">
   2213   <col width="16%">
   2214   <tr>
   2215    <th>CVE</th>
   2216    <th></th>
   2217    <th></th>
   2218    <th> Nexus </th>
   2219    <th> </th>
   2220   </tr>
   2221   <tr>
   2222    <td>CVE-2016-3798</td>
   2223    <td>A-28174490*<br>
   2224        M-ALPS02703105</td>
   2225    <td></td>
   2226    <td>Android One</td>
   2227    <td>2016 4 11</td>
   2228   </tr>
   2229 </table>
   2230 <p>*       . 
   2231 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2232   .</p>
   2233 
   2234 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-video-driver">
   2235 MediaTek     </h3>
   2236 <p>MediaTek      
   2237        
   2238   .        
   2239    .</p>
   2240 
   2241 <table>
   2242   <col width="19%">
   2243   <col width="20%">
   2244   <col width="10%">
   2245   <col width="23%">
   2246   <col width="16%">
   2247   <tr>
   2248    <th>CVE</th>
   2249    <th></th>
   2250    <th></th>
   2251    <th> Nexus </th>
   2252    <th> </th>
   2253   </tr>
   2254   <tr>
   2255    <td>CVE-2016-3799</td>
   2256    <td>A-28175025*<br>
   2257        M-ALPS02693738</td>
   2258    <td></td>
   2259    <td>Android One</td>
   2260    <td>2016 4 11</td>
   2261   </tr>
   2262   <tr>
   2263    <td>CVE-2016-3800</td>
   2264    <td>A-28175027*<br>
   2265        M-ALPS02693739</td>
   2266    <td></td>
   2267    <td>Android One</td>
   2268    <td>2016 4 11</td>
   2269   </tr>
   2270 </table>
   2271 <p>*       . 
   2272 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2273   .</p>
   2274 
   2275 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-gps-driver">
   2276 MediaTek GPS    </h3>
   2277 <p>MediaTek GPS     
   2278        
   2279   .        
   2280    .</p>
   2281 
   2282 <table>
   2283   <col width="19%">
   2284   <col width="20%">
   2285   <col width="10%">
   2286   <col width="23%">
   2287   <col width="16%">
   2288   <tr>
   2289    <th>CVE</th>
   2290    <th></th>
   2291    <th></th>
   2292    <th> Nexus </th>
   2293    <th> </th>
   2294   </tr>
   2295   <tr>
   2296    <td>CVE-2016-3801</td>
   2297    <td>A-28174914*<br>
   2298        M-ALPS02688853</td>
   2299    <td></td>
   2300    <td>Android One</td>
   2301    <td>2016 4 11</td>
   2302   </tr>
   2303 </table>
   2304 <p>*       . 
   2305 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2306   .</p>
   2307 
   2308 <h3 id="elevation-of-privilege-vulnerability-in-kernel-file-system-2">
   2309      </h3>
   2310 <p>         
   2311       
   2312 .        
   2313    .</p>
   2314 
   2315 <table>
   2316   <col width="19%">
   2317   <col width="16%">
   2318   <col width="10%">
   2319   <col width="27%">
   2320   <col width="16%">
   2321   <tr>
   2322    <th>CVE</th>
   2323    <th></th>
   2324    <th></th>
   2325    <th> Nexus </th>
   2326    <th> </th>
   2327   </tr>
   2328   <tr>
   2329    <td>CVE-2016-3802</td>
   2330    <td>A-28271368*</td>
   2331    <td></td>
   2332    <td>Nexus 9</td>
   2333    <td>2016 4 19</td>
   2334   </tr>
   2335   <tr>
   2336    <td>CVE-2016-3803</td>
   2337    <td>A-28588434*</td>
   2338    <td></td>
   2339    <td>Nexus 5X, Nexus 6P</td>
   2340    <td>2016 5 4</td>
   2341   </tr>
   2342 </table>
   2343 <p>*       . 
   2344 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2345   .</p>
   2346 
   2347 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-power-management-driver">
   2348 MediaTek      </h3>
   2349 <p>MediaTek       
   2350        
   2351   .        
   2352    .</p>
   2353 
   2354 <table>
   2355   <col width="19%">
   2356   <col width="20%">
   2357   <col width="10%">
   2358   <col width="23%">
   2359   <col width="16%">
   2360   <tr>
   2361    <th>CVE</th>
   2362    <th></th>
   2363    <th></th>
   2364    <th> Nexus </th>
   2365    <th> </th>
   2366   </tr>
   2367   <tr>
   2368    <td>CVE-2016-3804</td>
   2369    <td>A-28332766*<br>
   2370        M-ALPS02694410</td>
   2371    <td></td>
   2372    <td>Android One</td>
   2373    <td>2016 4 20</td>
   2374   </tr>
   2375   <tr>
   2376    <td>CVE-2016-3805</td>
   2377    <td>A-28333002*<br>
   2378        M-ALPS02694412</td>
   2379    <td></td>
   2380    <td>Android One</td>
   2381    <td>2016 4 21</td>
   2382   </tr>
   2383 </table>
   2384 <p>*       . 
   2385 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2386   .</p>
   2387 
   2388 <h3 id="elevation-of-privilege-vulnerability-in-mediatek-display-driver">
   2389 MediaTek     </h3>
   2390 <p>MediaTek      
   2391        
   2392   .        
   2393    .</p>
   2394 
   2395 <table>
   2396   <col width="19%">
   2397   <col width="20%">
   2398   <col width="10%">
   2399   <col width="23%">
   2400   <col width="16%">
   2401   <tr>
   2402    <th>CVE</th>
   2403    <th></th>
   2404    <th></th>
   2405    <th> Nexus </th>
   2406    <th> </th>
   2407   </tr>
   2408   <tr>
   2409    <td>CVE-2016-3806</td>
   2410    <td>A-28402341*<br>
   2411        M-ALPS02715341</td>
   2412    <td></td>
   2413    <td>Android One</td>
   2414    <td>2016 4 26</td>
   2415   </tr>
   2416 </table>
   2417 <p>*       . 
   2418 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2419   .</p>
   2420 
   2421 <h3 id="elevation-of-privilege-vulnerability-in-serial-peripheral-interface-driver">
   2422       </h3>
   2423 <p>       
   2424          
   2425 .        
   2426    .</p>
   2427 
   2428 <table>
   2429   <col width="19%">
   2430   <col width="16%">
   2431   <col width="10%">
   2432   <col width="27%">
   2433   <col width="16%">
   2434   <tr>
   2435    <th>CVE</th>
   2436    <th></th>
   2437    <th></th>
   2438    <th> Nexus </th>
   2439    <th> </th>
   2440   </tr>
   2441   <tr>
   2442    <td>CVE-2016-3807</td>
   2443    <td>A-28402196*</td>
   2444    <td></td>
   2445    <td>Nexus 5X, Nexus 6P</td>
   2446    <td>2016 4 26</td>
   2447   </tr>
   2448   <tr>
   2449    <td>CVE-2016-3808</td>
   2450    <td>A-28430009*</td>
   2451    <td></td>
   2452    <td>Pixel C</td>
   2453    <td>2016 4 26</td>
   2454   </tr>
   2455 </table>
   2456 <p>*       . 
   2457 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2458   .</p>
   2459 
   2460 <h3 id="elevation-of-privilege-vulnerability-in-qualcomm-sound-driver">
   2461 Qualcomm     </h3>
   2462 <p>Qualcomm      
   2463        
   2464   .       
   2465     .</p>
   2466 
   2467 <table>
   2468   <col width="19%">
   2469   <col width="16%">
   2470   <col width="10%">
   2471   <col width="27%">
   2472   <col width="16%">
   2473   <tr>
   2474    <th>CVE</th>
   2475    <th></th>
   2476    <th></th>
   2477    <th> Nexus </th>
   2478    <th> </th>
   2479   </tr>
   2480   <tr>
   2481    <td>CVE-2016-2068</td>
   2482    <td>A-28470967
   2483       <a href="https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?h=APSS.FSM.3.0&id=01ee86da5a0cd788f134e360e2be517ef52b6b00">QC-CR1006609</a></td>
   2484    <td></td>
   2485    <td>Nexus 5, Nexus 5X, Nexus 6, Nexus 6P</td>
   2486    <td>2016 4 28</td>
   2487   </tr>
   2488 </table>
   2489 
   2490 <h3 id="elevation-of-privilege-vulnerability-in-kernel">
   2491    </h3>
   2492 <p>       
   2493       
   2494 .        
   2495    .</p>
   2496 
   2497 <table>
   2498   <col width="19%">
   2499   <col width="20%">
   2500   <col width="10%">
   2501   <col width="23%">
   2502   <col width="16%">
   2503   <tr>
   2504    <th>CVE</th>
   2505    <th></th>
   2506    <th></th>
   2507    <th> Nexus </th>
   2508    <th> </th>
   2509   </tr>
   2510   <tr>
   2511    <td>CVE-2014-9803</td>
   2512    <td>A-28557020<br>
   2513       <a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/arch/arm64/include/asm/pgtable.h?h=linux-3.10.y&id=5a0fdfada3a2aa50d7b947a2e958bf00cbe0d830">
   2514        </a></td>
   2515    <td></td>
   2516    <td>Nexus 5X, Nexus 6P</td>
   2517    <td>Google </td>
   2518   </tr>
   2519 </table>
   2520 
   2521 <h3 id="information-disclosure-vulnerability-in-networking-component">
   2522     </h3>
   2523 <p>        
   2524       .
   2525             
   2526   .</p>
   2527 
   2528 <table>
   2529   <col width="19%">
   2530   <col width="16%">
   2531   <col width="10%">
   2532   <col width="27%">
   2533   <col width="16%">
   2534   <tr>
   2535    <th>CVE</th>
   2536    <th></th>
   2537    <th></th>
   2538    <th> Nexus </th>
   2539    <th> </th>
   2540   </tr>
   2541   <tr>
   2542    <td>CVE-2016-3809</td>
   2543    <td>A-27532522*</td>
   2544    <td></td>
   2545    <td><a href="#all_nexus"> Nexus</a></td>
   2546    <td>2016 3 5</td>
   2547   </tr>
   2548 </table>
   2549 <p>*       . 
   2550 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2551   .</p>
   2552 
   2553 <h3 id="information-disclosure-vulnerability-in-mediatek-wi-fi-driver">
   2554 MediaTek Wi-Fi    </h3>
   2555 <p>MediaTek Wi-Fi     
   2556       
   2557   .      
   2558          .</p>
   2559 
   2560 <table>
   2561   <col width="19%">
   2562   <col width="20%">
   2563   <col width="10%">
   2564   <col width="23%">
   2565   <col width="16%">
   2566   <tr>
   2567    <th>CVE</th>
   2568    <th></th>
   2569    <th></th>
   2570    <th> Nexus </th>
   2571    <th> </th>
   2572   </tr>
   2573   <tr>
   2574    <td>CVE-2016-3810</td>
   2575    <td>A-28175522*<br>
   2576        M-ALPS02694389</td>
   2577    <td></td>
   2578    <td>Android One</td>
   2579    <td>2016 4 12</td>
   2580   </tr>
   2581 </table>
   2582 <p>*       . 
   2583 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2584   .</p>
   2585 
   2586 <h3 id="elevation-of-privilege-vulnerability-in-kernel-video-driver">
   2587      </h3>
   2588 <p>      
   2589        
   2590   .       
   2591     .</p>
   2592 
   2593 <table>
   2594   <col width="19%">
   2595   <col width="16%">
   2596   <col width="10%">
   2597   <col width="27%">
   2598   <col width="16%">
   2599   <tr>
   2600    <th>CVE</th>
   2601    <th></th>
   2602    <th></th>
   2603    <th> Nexus </th>
   2604    <th> </th>
   2605   </tr>
   2606   <tr>
   2607    <td>CVE-2016-3811</td>
   2608    <td>A-28447556*</td>
   2609    <td></td>
   2610    <td>Nexus 9</td>
   2611    <td>Google </td>
   2612   </tr>
   2613 </table>
   2614 <p>*       . 
   2615 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2616   .</p>
   2617 
   2618 <h3 id="information-disclosure-vulnerability-in-mediatek-video-codec-driver">
   2619 MediaTek      </h3>
   2620 <p>MediaTek       
   2621        
   2622  .       
   2623     .</p>
   2624 
   2625 <table>
   2626   <col width="19%">
   2627   <col width="20%">
   2628   <col width="10%">
   2629   <col width="23%">
   2630   <col width="16%">
   2631   <tr>
   2632    <th>CVE</th>
   2633    <th></th>
   2634    <th></th>
   2635    <th> Nexus </th>
   2636    <th> </th>
   2637   </tr>
   2638   <tr>
   2639    <td>CVE-2016-3812</td>
   2640    <td>A-28174833*<br>
   2641        M-ALPS02688832</td>
   2642    <td></td>
   2643    <td>Android One</td>
   2644    <td>2016 4 11</td>
   2645   </tr>
   2646 </table>
   2647 <p>*       . 
   2648 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2649   .</p>
   2650 
   2651 <h3 id="information-disclosure-vulnerability-in-qualcomm-usb-driver">
   2652 Qualcomm USB    </h3>
   2653 <p>Qualcomm USB        
   2654       .
   2655       
   2656     .</p>
   2657 
   2658 <table>
   2659   <col width="19%">
   2660   <col width="16%">
   2661   <col width="10%">
   2662   <col width="27%">
   2663   <col width="16%">
   2664   <tr>
   2665    <th>CVE</th>
   2666    <th></th>
   2667    <th></th>
   2668    <th> Nexus </th>
   2669    <th> </th>
   2670   </tr>
   2671   <tr>
   2672    <td>CVE-2016-3813</td>
   2673    <td>A-28172322*
   2674        QC-CR1010222</td>
   2675    <td></td>
   2676    <td>Nexus 5, Nexus 5X, Nexus 6, Nexus 6P</td>
   2677    <td>2016 4 11</td>
   2678   </tr>
   2679 </table>
   2680 <p>*       . 
   2681 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2682   .</p>
   2683 
   2684 <h3 id="information-disclosure-vulnerability-in-nvidia-camera-driver">
   2685 NVIDIA     </h3>
   2686 <p>NVIDIA         
   2687       .
   2688       
   2689     .</p>
   2690 
   2691 <table>
   2692   <col width="19%">
   2693   <col width="20%">
   2694   <col width="10%">
   2695   <col width="23%">
   2696   <col width="16%">
   2697   <tr>
   2698    <th>CVE</th>
   2699    <th></th>
   2700    <th></th>
   2701    <th> Nexus </th>
   2702    <th> </th>
   2703   </tr>
   2704   <tr>
   2705    <td>CVE-2016-3814</td>
   2706    <td>A-28193342*<br>
   2707        N-CVE20163814</td>
   2708    <td></td>
   2709    <td>Nexus 9</td>
   2710    <td>2016 4 14</td>
   2711   </tr>
   2712   <tr>
   2713    <td>CVE-2016-3815</td>
   2714    <td>A-28522274*<br>
   2715        N-CVE20163815</td>
   2716    <td></td>
   2717    <td>Nexus 9</td>
   2718    <td>2016 5 1</td>
   2719   </tr>
   2720 </table>
   2721 <p>*       . 
   2722 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2723   .</p>
   2724 
   2725 <h3 id="information-disclosure-vulnerability-in-mediatek-display-driver">
   2726 MediaTek     </h3>
   2727 <p>MediaTek      
   2728         
   2729 .       
   2730     .</p>
   2731 
   2732 <table>
   2733   <col width="19%">
   2734   <col width="16%">
   2735   <col width="10%">
   2736   <col width="27%">
   2737   <col width="16%">
   2738   <tr>
   2739    <th>CVE</th>
   2740    <th></th>
   2741    <th></th>
   2742    <th> Nexus </th>
   2743    <th> </th>
   2744   </tr>
   2745   <tr>
   2746    <td>CVE-2016-3816</td>
   2747    <td>A-28402240*</td>
   2748    <td></td>
   2749    <td>Android One</td>
   2750    <td>2016 4 26</td>
   2751   </tr>
   2752 </table>
   2753 <p>*       . 
   2754 <a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus   
   2755   .</p>
   2756 
   2757 <h3 id="information-disclosure-vulnerability-in-kernel-teletype-driver">
   2758      </h3>
   2759 <p>         
   2760       .
   2761       
   2762     .</p>
   2763 
   2764 <table>
   2765   <col width="19%">
   2766   <col width="20%">
   2767   <col width="10%">
   2768   <col width="23%">
   2769   <col width="16%">
   2770   <tr>
   2771    <th>CVE</th>
   2772    <th></th>
   2773    <th></th>
   2774    <th> Nexus </th>
   2775    <th> </th>
   2776   </tr>
   2777   <tr>
   2778    <td>CVE-2016-0723</td>
   2779    <td>A-28409131<br>
   2780       <a href="http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439">
   2781 </a></td>
   2782    <td></td>
   2783    <td>Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013), Nexus 9, Nexus
   2784        Player, Pixel C</td>
   2785    <td>2016 4 26</td>
   2786   </tr>
   2787 </table>
   2788 
   2789 <h3 id="denial-of-service-vulnerability-in-qualcomm-bootloader">
   2790 Qualcomm   (DoS) </h3>
   2791 <p>Qualcomm   (DoS)     
   2792       ,     
   2793    .       
   2794     .</p>
   2795 
   2796 <table>
   2797   <col width="19%">
   2798   <col width="16%">
   2799   <col width="10%">
   2800   <col width="27%">
   2801   <col width="16%">
   2802   <tr>
   2803    <th>CVE</th>
   2804    <th></th>
   2805    <th></th>
   2806    <th> Nexus </th>
   2807    <th> </th>
   2808   </tr>
   2809   <tr>
   2810    <td>CVE-2014-9798</td>
   2811    <td>A-28821448
   2812       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=b05eed2491a098bf627ac485a5b43d2f4fae2484">QC-CR681965</a></td>
   2813    <td></td>
   2814    <td>Nexus 5</td>
   2815    <td>2014 10 31</td>
   2816   </tr>
   2817   <tr>
   2818    <td>CVE-2015-8893</td>
   2819    <td>A-28822690
   2820       <a href="https://us.codeaurora.org/cgit/quic/la//kernel/lk/commit/?id=800255e8bfcc31a02e89460460e3811f225e7a69">QC-CR822275</a></td>
   2821    <td></td>
   2822    <td>Nexus 5, Nexus 7(2013)</td>
   2823    <td>2015 8 19</td>
   2824   </tr>
   2825 </table>
   2826 <h2 id="common-questions-and-answers">   </h2>
   2827 <p>           .</p>
   2828 
   2829 <p><strong>1.          ?</strong></p>
   2830 <p>2016-07-01        2016-07-01
   2831     . 2016-07-05   
   2832     2016-07-05    
   2833 .     
   2834 <a href="https://support.google.com/nexus/answer/4457705"> </a> .   
   2835         .
   2836 [ro.build.version.security_patch]:[2016-07-01] 
   2837 [ro.build.version.security_patch]:[2016-07-05]</p>
   2838 
   2839 <p><strong>2           ?</strong></p>
   2840 <p>  Android   Android  
   2841         
   2842       . Android 
   2843            
   2844 .</p>
   2845 <p>2016 7 5         
   2846       .</p>
   2847 <p>2016 7 1         
   2848          
   2849  . 2016 7 1     
   2850 2016 7 5      
   2851   .</p>
   2852 
   2853 <p id="all_nexus"><strong>3.     Nexus   ?</strong></p>
   2854 <p><a href="#2016-07-01_details">2016-07-01</a> 
   2855 <a href="#2016-07-05_details">2016-07-05</a>    
   2856       Nexus   
   2857  Nexus   .      .</p>
   2858 <ul>
   2859   <li><strong> Nexus </strong>:   Nexus    
   2860    <em> Nexus </em>  ' Nexus' .
   2861   ' Nexus'  
   2862   <a href="https://support.google.com/nexus/answer/4457705#nexus_devices"> </a>
   2863   . Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7(2013),
   2864   Nexus 9, Android One, Nexus Player, Pixel C</li>
   2865   <li><strong> Nexus </strong>:     Nexus
   2866     ,   Nexus 
   2867   <em> Nexus </em>  .</li>
   2868   <li><strong>Nexus  </strong>:  Nexus     
   2869    <em> Nexus </em>  '' .</li>
   2870 </ul>
   2871 
   2872 <p><strong>4.      ?</strong></p>
   2873 <p>   <em></em>      
   2874      .  
   2875   .</p>
   2876 
   2877 <table>
   2878   <tr>
   2879    <th></th>
   2880    <th> </th>
   2881   </tr>
   2882   <tr>
   2883    <td>A-</td>
   2884    <td>Android  ID</td>
   2885   </tr>
   2886   <tr>
   2887    <td>QC-</td>
   2888    <td>Qualcomm  </td>
   2889   </tr>
   2890   <tr>
   2891    <td>M-</td>
   2892    <td>MediaTek  </td>
   2893   </tr>
   2894   <tr>
   2895    <td>N-</td>
   2896    <td>NVIDIA  </td>
   2897   </tr>
   2898 </table>
   2899 
   2900 <h2 id="revisions"></h2>
   2901 <ul>
   2902   <li>2016 7 6:  </li>
   2903   <li>2016 7 7:
   2904     <ul>
   2905       <li>AOSP  
   2906       <li>CVE-2016-3794 CVE-2016-3814  
   2907       <li>CVE-2016-2501  CVE-2016-2502  
   2908     </li></li></li></ul>
   2909   </li>
   2910   <li>2016 7 11: CVE-2016-3750  </li>
   2911   <li>2016 7 14: CVE-2016-2503  </li>
   2912 </ul>
   2913 
   2914   </body>
   2915 </html>
   2916