The vulnerability of the audio driver of the MSM mobile application for the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the audio driver in the MSM mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full overflow, followed by a buffer overflow, if the function name is long...

The vulnerability of the audio driver function of the mobile application MSM for the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the audio driver function in the Android mobile application MSM is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full memory overflow, followed by a buffer overflow, if large values of certain variables are set ...

The vulnerability of the Android CAF-release operating system’s audio driver allows a hacker to execute arbitrary code.

The vulnerability of the Android CAF-release operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to continue executing code even if the check for valid length values fails and an error message is...

CVE-2016-5860

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...

Integer overflow

In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...

Code injection

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...

CVE-2016-5853

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...

Integer overflow

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...

CVE-2016-5347

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver...

CVE-2016-5853

CVE-2016-5853 affects the Qualcomm Sound/Audio driver in Android CAF builds using the Linux kernel. The root cause is a sanity check: if a length value is out of the valid range, the code prints an error but continues as if the value were correct, potentially enabling unintended behavior. The CVE...

CVE-2016-5347

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver...

CVE-2016-5864

In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...

CVE-2016-5347

CVE-2016-5347 describes an information-disclosure vulnerability in Qualcomm components, specifically in the CAF Android/Linux kernel audio driver. The issue allows leakage of kernel stack data to userspace via the audio driver, affecting Qualcomm-based Android devices using CAF-released kernels. ...

CVE-2016-5860

CVE-2016-5860 affects the Qualcomm sound/ audio driver stack on Android-based devices (Qualcomm MSM Android builds, Firefox OS for MSM, QRD Android). The issue occurs when a function is called with an excessively large length, triggering an integer overflow that leads to a heap buffer overflow. T...

CVE-2016-5853

In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...

Huawei P9 Mobile Audio Driver Denial of Service Vulnerability

Huawei P9 is a smartphone from Chinese company Huawei Huawei. A denial of service vulnerability exists in the audio driver in the Huawei P9 phone. An attacker induces a user to install a malicious mobile application, and the application may access null pointers when accessing shared resources due...

Security Advisory - DoS Vulnerability of Audio Driver in Some Huawei Smartphones

Audio driver has a denial of service DoS vulnerability in some Huawei smart phones. An attacker tricks a user into installing a malicious application on the smart phone, and the race condition cause null pointer accessing during the application access shared resource, which make the system reboot...

The vulnerability of NVIDIA’s audio driver for Android systems allows a hacker to execute arbitrary code.

The vulnerability of NVIDIA’s audio driver for Android-related operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a local malicious application, from a remote location...

The vulnerability of NVIDIA’s audio driver for Android systems allows a hacker to execute arbitrary code.

The vulnerability of NVIDIA’s audio driver for Android-related operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a local malicious application, from a remote location...

The vulnerability of NVIDIA’s audio driver for Android systems allows a hacker to execute arbitrary code.

The vulnerability of NVIDIA’s audio driver for Android-related operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a local malicious application, from a remote location...