583 matches found
CVE-2017-0620
An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android...
CVE-2016-10283
CVE-2016-10283 is an elevation-of-privilege flaw in the Qualcomm Wi‑Fi driver for Android that allows a local malicious app to execute arbitrary code in the kernel context after compromising a privileged process. The issue affects Kernel-3.10/3.18 Android builds (Android 5.x–7.x era devices inclu...
CVE-2016-10283
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...
CVE-2017-0619
An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...
CVE-2017-0628
CVE-2017-0628 is an information-disclosure vulnerability in the Qualcomm camera driver. The issue could allow a local malicious application to access data outside its permissions, requiring compromise of a privileged process. Affected: Android devices using Kernel-3.10 or Kernel-3.18 with Qualcom...
CVE-2016-10290
CVE-2016-10290 is an elevation-of-privilege issue in the Qualcomm Shared Memory Driver used on Android. The vulnerability could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the shared memory driver. The entry specifies that exploitation is loca...
CVE-2016-10277
CVE-2016-10277 : An elevation-of-privilege in the Motorola bootloader allows a local app to run arbitrary code in the bootloader context by exploiting kernel command-line injection, leading to potential full device compromise. Affected: Android with Kernel-3.10 and Kernel-3.18. Exploitation evide...
CVE-2016-10291
CVE-2016-10291 involves an elevation of privilege in the Qualcomm Slimbus driver affecting Android kernels (Kernel-3.10). The issue allows a local malicious app to execute arbitrary code in the kernel context via this driver. Public exploitation details are not provided in the supplied documents....
CVE-2017-0608
CVE-2017-0608 is an elevation-of-privilege in the Qualcomm kernel sound driver for Android, enabling a local attacker to run arbitrary code in the kernel context. The flaw requires compromising a privileged process first. Affected software/versions include Android on Kernel-3.10 and Kernel-3.18. ...
CVE-2017-0620
CVE-2017-0620 is a local elevation-of-privilege in the Qualcomm Secure Channel Manager driver on Android, allowing a malicious local app to run code in the kernel. Affected: Android devices with Kernel-3.10/3.18 (per the CVE entry). Impact per sources is High (CVSSv3: 7.0). Affected devices liste...
CVE-2016-10293
CVE-2016-10293 is an information-disclosure flaw in the Qualcomm video driver on Android (Kernel-3.10). A local malicious app could access data beyond its permissions by exploiting the driver when a privileged process is compromised. The vulnerability is listed for Nexus 5X, Nexus 6P, and Android...
CVE-2016-10287
CVE-2016-10287 describes an elevation-of-privilege vulnerability in the Qualcomm sound driver within Android’s kernel. The issue could let a local malicious application execute arbitrary code in the kernel context, requiring prior compromise of a privileged process. Affected components/versions i...
CVE-2017-0629
CVE-2017-0629 is an information-disclosure vulnerability in the Qualcomm camera driver for Android, enabling a local malicious app to access data outside its permissions after compromising a privileged process. Affected: Android kernels 3.10/3.18 (Qualcomm camera driver). Base impact: partial con...
CVE-2017-0622
CVE-2017-0622 targets the Goodix touchscreen driver in Android, enabling local elevation of privilege to execute code in the kernel via a compromised privileged process. Public details specify Android kernel 3.10 and the Goodix driver as the vulnerable component, with high impact (kernel context ...
CVE-2017-0465
CVE-2017-0465 describes an elevation of privilege vulnerability in the Qualcomm ADSPRPC driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices. Affected components/versions in the public records include the Android kernel (Kernel-3.10, Kernel-3...
CVE-2016-10284
CVE-2016-10284 is a vulnerability in the Qualcomm video driver that enables an elevated-privilege path: a local, privileged process could be exploited by a malicious local app to run arbitrary code in the kernel context on Android devices. The issue affects Android kernel versions 3.10 and 3.18, ...
CVE-2017-0611
CVE-2017-0611 is an elevation of privilege in the Qualcomm sound driver on Android that could allow a local attacker to run code in kernel context. Affected: Android devices using Kernel-3.10 and Kernel-3.18 (Android ID A-35393841). The entry is listed in multiple sources (NVD/NVD list and CVE re...
CVE-2016-10292
CVE-2016-10292 is a denial-of-service vulnerability in the Qualcomm Wi‑Fi driver affecting Android devices. A proximate attacker could trigger a DoS in the Wi‑Fi subsystem by exploiting the Qualcomm Wi‑Fi driver within Android kernels listed as Kernel-3.10 and Kernel-3.18. Public description conf...
CVE-2017-0613
CVE-2017-0613 is a local elevation-of-privilege flaw in the Qualcomm Secure Execution Environment Communicator driver affecting Android, enabling a non-privileged, user-space process to gain arbitrary code execution in the kernel if a privileged process is first compromised. Affected kernel versi...
CVE-2017-0619
The CVE-2017-0619 entry describes an elevation-of-privilege vulnerability in the Qualcomm pin controller driver on Android kernels (Kernel-3.10). A local malicious app could execute arbitrary code in the kernel context. The CVSS indicates LOCAL access with HIGH impact on confidentiality, integrit...