PT-2016-2598

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of num r stages, num g stages, and num b stages data in the drivers/video/msm/mdp4 util.c file of the Qualcomm component in Android. This allows...

PT-2016-2599

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 on Nexus 6 devices Description The issue is related to the MSM camera driver in the Qualcomm components in Android, which does not validate input parameters. This allows attackers to gain privileges via a...

PT-2016-2609

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the sound/soc/msm/qdsp6v2/msm-lsm-client.c file in the Qualcomm components of the Android operating system. It does not validate certain user-space data, which allows...

PT-2016-2617

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of CPP frame messages in the msm cpp.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafted...

PT-2016-2627

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the mishandling of a user-space pointer in the msm actuator.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafted...

PT-2016-2635

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain index values in the msm isp stats util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via ...

PT-2016-2638

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of a certain parameter in the msm csid.c file, which allows attackers to gain privileges via a crafted application. This can be exploited by a remo...

PT-2016-2637

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of the number of streams in the msm isp axi util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a...

PT-2016-2595

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of the stream state in the msm cpp.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafted...

PT-2016-2596

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the improper validation of array indexes in the msm isp axi util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafte...

PT-2016-2636

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to insufficient access control in the drivers/media/platform/msm/camera v2/sensor/csiphy/msm csiphy.c file of the Qualcomm components in Android. This allows attackers to ga...

PT-2016-2633

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is caused by multiple buffer overflows in the msm isp util.c file within the Qualcomm components. This allows attackers to gain privileges via a crafted application. The estimated numb...

CVE-2015-8939: Undefined Security Weakness

drivers/video/msm/mdp4util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug...

CVE-2014-9880: Undefined Security Weakness

drivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not validate VENIOCTLGETSEQUENCEHDR ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769352 and Qualcomm intern...

CVE-2014-9897: Exposure of Sensitive Information to an Unauthorized Actor

sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bu...

CVE-2014-9898: Exposure of Sensitive Information to an Unauthorized Actor

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and...

CVE-2014-9886: Improper Input Validation

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815575 and Qualcomm interna...

CVE-2015-8943: Undefined Security Weakness

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

CVE-2015-8938: Undefined Security Weakness

The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022...

CVE-2016-3762

The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application that uses 1 the AFMSMIPC socket class or 2 another socket class that is unrecognized by SELinux, aka internal bug 28612709...