CVE-2016-8408

CVE-2016-8408 describes a local information-disclosure vulnerability in the NVIDIA video driver on Android (Kernel-3.10). The issue could allow a local malicious application to access data outside its permission levels, and is rated Moderate because exploitation requires compromising a privileged...

CVE-2016-6791

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8394

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8392

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8404

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

CVE-2016-8407

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

CVE-2016-6780

CVE-2016-6780 is described as an elevation-of-privilege in the HTC sound codec driver that could allow a local malicious application to execute arbitrary code in the kernel context on Android (kernel-3.10). Affected product/any specifics beyond Android and Nexus 9 are not provided in the Initial ...

CVE-2016-8394

CVE-2016-8394 describes an elevation-of-privilege vulnerability in the Synaptics touchscreen driver on Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the Synaptics driver, requiring initial compromise of a privileged proc...

CVE-2016-6760

CVE-2016-6760: Elevation of privilege in Qualcomm Media Codecs affecting Android. A local malicious app could execute arbitrary code in a privileged process via the Qualcomm Media Codecs component. Affected products/versions include Android devices with Kernel 3.10 and 3.18. The issue is categori...

CVE-2016-6757

CVE-2016-6757 describes an information-disclosure vulnerability affecting Qualcomm components used in Android devices, specifically the camera driver and video driver. The issue could allow a local malicious application to access data beyond its permissions after compromising a privileged process...

CVE-2016-6761

CVE-2016-6761 describes an elevation of privilege vulnerability in Qualcomm media codecs on Android. A local malicious app could execute arbitrary code within the context of a privileged process due to this flaw in the media codecs. Affected devices include Nexus 5X/6/6P, Nexus 9, Android One, Ne...

CVE-2016-6780

An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6759

CVE-2016-6759 is an elevation of privilege vulnerability in Qualcomm Media Codecs on Android. It could allow a local malicious app to execute arbitrary code within the context of a privileged process. Affected components/conditions: Android devices using Kernel-3.10 or Kernel-3.18 with Qualcomm M...

CVE-2016-6779

CVE-2016-6779 is a local elevation-of-privilege in the HTC sound codec driver affecting Android kernel 3.10 (Nexus 9). The vulnerability could let a local malicious application execute arbitrary code in the kernel context if it can compromise a privileged process. The issue is categorized as High...

CVE-2016-6779

An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8397

CVE-2016-8397 affects the NVIDIA Tegra kernel driver (NVMAP) with an information-disclosure vulnerability: uninitialized stack memory may be leaked to user space, enabling data exposure from local, unprivileged contexts. CVSSv3 base score is 5.5 (LOCAL, LOW complexity, UI REQUIRED; confidentialit...

CVE-2016-6791

CVE-2016-6791 is an elevation-of-privilege vulnerability in the Qualcomm sound driver affecting Android devices. The issue allows a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. Affected components/versions inclu...

CVE-2016-8393

CVE-2016-8393 describes an elevation of privilege in the Synaptics touchscreen driver that could let a local malicious Android application execute arbitrary code in kernel context. Affected product: Android (kernel 3.10). Root cause: a vulnerability in the Synaptics touchscreen driver enabling co...

CVE-2016-8392

CVE-2016-8392 is a local privilege-escalation in the Qualcomm sound driver affecting Android devices (Nexus 5X/6/6P, Android One, Pixel/Pixel XL) via the kernel context. The vulnerability could let a malicious local app execute arbitrary code in the kernel after compromising a privileged process....

CVE-2016-6785

CVE-2016-6785 is described across multiple sources as an elevation of privilege vulnerability in the MediaTek driver on Android, enabling a (local) attacker to execute arbitrary code in the context of the kernel. The documented impact is a kernel-level compromise that requires a privileged proces...