33563 matches found
CVE-2014-9868
CVE-2014-9868 affects Qualcomm MSM camera_v2 sensor code (msm_csiphy.c) in Android prior to 2016-08-05 on Nexus 5 and Nexus 7 (2013). A crafted mask value provided by an application can lead to privilege escalation. The vulnerability is documented in the Android/Qualcomm context and is addressed ...
CVE-2014-9863
The CVE-2014-9863 issue is a local privilege escalation in Android due to an integer underflow in the Qualcomm diag driver used on Nexus 5 and Nexus 7 (2013). A crafted app could exploit this to gain privileges or access sensitive data. Affected software is Android on Nexus devices prior to the 2...
CVE-2014-9880
CVE-2014-9880 affects Android on Nexus 7 (2013) via Qualcomm drivers: the venc.c video engine fails to validate VEN_IOCTL_GET_SEQUENCE_HDR ioctl, enabling privilege escalation with a crafted app. Root cause: lack of validation in drivers/video/msm/vidc/common/enc/venc.c. Android bug 28769352 and ...
CVE-2014-9900
CVE-2014-9900 affects the Linux kernel (ethtool_get_wol in net/core/ethtool.c) up to version 4.7. It can leak kernel memory due to uninitialized data, enabling local information disclosure. Reported impact seen on Android devices (Nexus 5/2013 era) with Android before 2016-08-05. Public advisorie...
CVE-2014-9899
CVE-2014-9899 describes an information-disclosure flaw in the USB/ehci-msm2.c driver within Qualcomm components used by Android on Nexus 5 devices prior to 2016-08-05. The root cause is omission of certain minimum calculations before copying data, enabling a crafted application to obtain sensitiv...
CVE-2014-9887
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804057 and Qualcomm internal bug CR636633...
CVE-2014-9878
CVE-2014-9878 affects Android on Nexus 5 with the Qualcomm MMC component. The vulnerable code is drivers/mmc/card/mmc_block_test.c in Qualcomm components, where kernel-space buffer addresses are not rejected. This allows a local attacker with a crafted application to gain privileges. The issue is...
CVE-2014-9891
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which allows attackers to gain privileges via a crafted application that makes an ioctl call, aka Android internal bug 28749283 and Qualcomm internal bug...
CVE-2014-9864
The CVE-2014-9864 entry concerns Android on Nexus devices (Nexus 5/7 2013) where drivers/misc/qseecom.c in Qualcomm components does not validate ioctl calls, enabling privilege escalation via a crafted app. Connected docs are not provided here, but the description states the flaw allows local pri...
CVE-2014-9872
The CVE-2014-9872 entry concerns the Qualcomm diag driver in Android on Nexus 5 prior to 2016-08-05. The issue is that the diag driver does not ensure unique identifiers in a DCI client table, which could allow a crafted application to escalate privileges. The vulnerability is tied to Android int...
CVE-2014-9876
CVE-2014-9876 affects Android with Qualcomm components on Nexus 5/5X/6/6P/7 (2013). The vulnerability is in drivers/char/diag/diagfwd.c, where mishandling of certain integer values allows privilege escalation via a crafted application (Android internal bug 28767796; Qualcomm CR483408). Exploitati...
CVE-2014-9886
CVE-2014-9886 affects Android on Nexus 5 and Nexus 7 (2013) devices, specifically the Qualcomm component under arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c. The vulnerability is caused by improper validation of input parameters in USF, enabling a local attacker to gain privileges via a crafted appl...
CVE-2014-9883
CVE-2014-9883 describes an integer overflow in drivers/char/diag/diag_dci.c within the Qualcomm component used by Android on Nexus 5 and Nexus 7 (2013) devices, before the 2016-08-05 patch. The vulnerability could allow a crafted application to gain privileges or access sensitive information. Pub...
CVE-2014-9896
Technical details (affected product/component, root cause, impact, fix) are not publicly provided in the connected documents. Please monitor for updates from official advisories to obtain confirmed remediation guidance.
CVE-2014-9875
CVE-2014-9875 affects Android on Nexus 7 (2013) prior to 2016-08-05. The vulnerability is in drivers/char/diag/diag_dci.c of Qualcomm components and allows privilege escalation via a crafted application that sends short DCI request packets (Android internal bug 28767589; Qualcomm bug CR483310). P...
CVE-2014-9895
drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...
CVE-2014-9876
drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 2013 devices mishandles certain integer values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28767796 and Qualcomm internal bug CR48340...
CVE-2014-9902
CVE-2014-9902 involves a buffer overflow in the Qualcomm Wi‑Fi driver’s file CORE/SYS/legacy/src/utils/src/dot11f.c on Nexus 7 (2013) devices. An attacker could trigger arbitrary code execution by sending a crafted Information Element in an 802.11 management frame, exploiting the vulnerability in...
CVE-2014-9901
CVE-2014-9901 affects the Qualcomm Wi‑Fi driver on Nexus 7 (2013) devices running Android prior to the 2016-08-05 patch. The issue stems from incorrect snprintf calls in the Qualcomm Wi‑Fi driver, allowing a remote attacker to trigger a denial of service (device hang or reboot) via crafted frames...
