Android on Nexus Qualcomm Component Size Difference Error Vulnerability

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

Qualcomm Innovation Center Android contributions for MSM memory misreference vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a Qualcomm chip product used in the MSM program to support users in building Android-based platforms with other enhancements; MSM-Camera driver for the Linux kernel is a camera driver for the Linux kernel. QuIC Android contributions...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06201)

Android on Nexus 6 is an open source Linux-based operating system for the Nexus 6 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

CVE-2015-0568

Use-after-free vulnerability in the msmsetcrop function in drivers/media/video/msm/msmcamera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a...

Design/Logic Flaw

Use-after-free vulnerability in the msmsetcrop function in drivers/media/video/msm/msmcamera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a...

CVE-2015-0568

Use-after-free vulnerability in the msmsetcrop function in drivers/media/video/msm/msmcamera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a...

UBUNTU-CVE-2015-0568

Use-after-free vulnerability in the msmsetcrop function in drivers/media/video/msm/msmcamera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a...

CVE-2015-0568

Use-after-free vulnerability in the msmsetcrop function in drivers/media/video/msm/msmcamera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a...

CVE-2015-8942

drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the stream state, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814652 and Qualcomm internal bug...

CVE-2015-8938

The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022...

CVE-2014-9890

Off-by-one error in drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application that sends an I2C command, aka Android internal bug 28770207 and Qualcomm...

CVE-2014-9889

drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate CPP frame messages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803645 and Qualcomm internal bug...

Code injection

drivers/media/platform/msm/camerav2/sensor/csid/msmcsid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate a certain parameter, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747684 and Qualcom...

Null pointer dereference

drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices mishandles a user-space pointer, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28768281 and...

Code injection

drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate CPP frame messages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803645 and Qualcomm internal bug...

Input validation

The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022...

Buffer overflow

Multiple buffer overflows in drivers/media/platform/msm/camerav2/isp/msmisputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28749803 and Qualcomm internal bug CR51471...

CVE-2014-9867

drivers/media/platform/msm/camerav2/isp/msmispaxiutil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate the number of streams, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749629 and Qualcom...

UBUNTU-CVE-2014-9866

drivers/media/platform/msm/camerav2/sensor/csid/msmcsid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate a certain parameter, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747684 and Qualcom...

Code injection

drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the stream state, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814652 and Qualcomm internal bug...