CVE-2016-4038

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the...

PT-2017-8447

Name of the Vulnerable Software and Affected Versions Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset Description The issue is related to an array index error in the msm sensor config function. This error can be triggered by local users via the gpio...

PT-2017-3139

Name of the Vulnerable Software and Affected Versions Radisys MRF Web Panel SWMS version 9.0.1 Description An issue in the Radisys MRF Web Panel allows for OS command injection attacks through the MSM MACRO NAME parameter in the "/swms/ms.cgi" API endpoint. By using the pipe character |, attacker...

PT-2017-3411

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-2746

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android affected versions not specified Description The issue is related to an audio driver function where some parameters from userspace can cause integer overflow followed by...

PT-2016-3161

Name of the Vulnerable Software and Affected Versions Qualcomm products for Android for MSM affected versions not specified Description The issue is related to insufficient access control in an audio driver, which can be exploited by a remote attacker to cause an integer overflow followed by a he...

PT-2016-3160

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android affected versions not specified Description The issue is related to a control associated with a codec, where type casting is performed to the container structure instea...

PT-2016-3158

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Description The issue is related to a sound driver in the Android operating system for MSM, which is associated with inadequate access control. This can be exploited by a remote attacker to choos...

Android Qualcomm QDSP6v2 Driver Denial of Service Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/msm-ds2- dap-config.c file in the Qualcomm QDSP6v2 driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the applicatio...

Buffer overflow

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

PT-2016-7054

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue is related to the sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c file in a Qualcomm QDSP6v2 driver. It allows attackers to cause a denial of service or possibly have other unspecified...

PT-2016-7055

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data in the sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c file in a Qualcomm...

CVE-2016-6693: Improper Input Validation

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585...

CVE-2016-6695: Improper Restriction of Operations within the Bounds of a Memory Buffer

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540...

CVE-2016-6694: Improper Input Validation

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka Qualcomm internal bug CR 1033525...

CVE-2016-6696: Improper Input Validation

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130...

CVE-2015-8951: Undefined Security Weakness

Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm...

CVE-2016-3901: Integer Overflow or Wraparound

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999161 and Qualcomm...