Approved changes feed: RSS · Atom

cpe:2.3:h:google:nexus_5:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductNexus 5 (cff6f7b6-a6ce-5493-ab8e-165e6daaf14f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45866 not_vulnerable 2026-06-08 06:12:43.503655 Details available
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.
Published: 2023-12-08T00:00:00.000Z
Updated: 2025-11-04T19:25:32.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6684 not_vulnerable 2026-06-08 05:08:03.243290 Details available
The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243.
Published: 2016-10-10T10:00:00.000Z
Updated: 2024-08-06T01:36:29.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2459 not_vulnerable 2026-06-08 05:07:42.303750 Details available
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and IGraphicBufferProducer.cpp, aka internal bug 27556038.
Published: 2016-05-09T10:00:00.000Z
Updated: 2024-08-05T23:32:20.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2454 not_vulnerable 2026-06-08 05:07:42.297641 Details available
The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service (reboot) via a crafted file, aka internal bug 26221024.
Published: 2016-05-09T10:00:00.000Z
Updated: 2024-08-05T23:32:20.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2443 not_vulnerable 2026-06-08 05:07:42.277033 Details available
The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525.
Published: 2016-05-09T10:00:00.000Z
Updated: 2024-08-05T23:32:20.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2432 not_vulnerable 2026-06-08 05:07:42.264508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2431 not_vulnerable 2026-06-08 05:07:42.262638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9888 not_vulnerable 2026-06-08 05:06:13.130168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0997 not_vulnerable 2026-06-08 05:05:15.391313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.