Code injection

The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897...

CVE-2016-3858

Buffer overflow in drivers/soc/qcom/subsystemrestart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug...

CVE-2016-3866

The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28868303 and Qualcomm internal bug CR1032820...

CVE-2016-3867

CVE-2016-3867 describes an elevation-of-privilege flaw in the Qualcomm IPA driver used by Android on Nexus 5X and 6P, prior to 2016-09-05. A crafted application could gain privileges, per CNVD-2016-07559 and the CVE entry. The root cause and exact exploitation details are not provided in the docu...

CVE-2016-3893

CVE-2016-3893 affects the Qualcomm sound codec on Android devices (Nexus 6P) prior to 2016-09-05. The vulnerability lies in the wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c, which does not properly copy firmware data, enabling a crafted application to cause information di...

CVE-2016-3868

The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28967028 and Qualcomm internal bug CR1032875...

CVE-2016-3869

The Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29009982 and Broadcom internal bug RB96070...

CVE-2016-3868

CVE-2016-3868 affects the Qualcomm power driver on Nexus 5X and 6P, enabling local privilege escalation via a crafted app. Root cause is in the Qualcomm power driver before 2016-09-05 (Android builds for Nexus devices). The issue is listed as High severity in the 2016-09 Android bulletin; patches...

CVE-2016-3866

CVE-2016-3866 identifies an elevation-of-privilege vulnerability in the Qualcomm sound driver in Android prior to 2016-09-05 on Nexus 5X, 6 and 6P. A crafted application could gain privileges in the context of the kernel via the affected sound-driver path. The issue is listed among multiple Qualc...

CVE-2016-3867

The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897...

CVE-2016-3859

The CVE-2016-3859 issue affects the Qualcomm camera driver in Android on Nexus 5, 5X, 6, and 6P prior to 2016-09-05. The root cause is an elevation of privilege via a crafted application, allowing a local attacker to gain higher privileges within the device. The Android security bulletin notes th...

CVE-2016-3858

CVE-2016-3858 is a local-privilege-escalation vulnerability caused by a buffer overflow in drivers/soc/qcom/subsystem_restart.c (Qualcomm subsystem driver) on Android devices. The issue affects Nexus 5X and 6P, where a crafted application sending a long string could escalate privileges. Public de...

CVE-2016-3893

The wcdcalhwdepioctlshared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2014-9876

drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 2013 devices mishandles certain integer values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28767796 and Qualcomm internal bug CR48340...

CVE-2014-9874

CVE-2014-9874 is a buffer overflow in Qualcomm components of Android (before 2016-08-05) affecting Nexus 5, 5X, 6P and 7 (2013). The root cause is memory corruption in audio_utils.c and q6asm.c (Android internal bug 28751152; Qualcomm bug CR563086). Impact is privilege escalation via a crafted ap...

CVE-2016-3846

The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...

Code injection

The Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28817378...

Integer overflow

Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted header field in a boot image, aka Android internal bug 27917291 and Qualcomm internal bug CR945164...

Code injection

The Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28377352 and Qualcomm internal bug CR1002974...

CVE-2016-3850

Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted header field in a boot image, aka Android internal bug 27917291 and Qualcomm internal bug CR945164...