CVE-2016-6680

CNVD-2016-09390 describes CVE-2016-6680 as an information disclosure vulnerability in the Qualcomm CORE/HDD WLAN driver (wlan_hdd_wext.c) on Android devices, prior to 2016-10-05, affecting Nexus 5X and Android One. An attacker could obtain sensitive information by inducing a crafted application t...

CVE-2016-6687

The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30162222...

CVE-2016-6682

drivers/misc/qcom/qdsp6v2/audioutils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2016-6685

Technical details for CVE-2016-6685 are not publicly provided in the supplied connected documents. Monitor for updates. The entry notes a kernel information disclosure on Nexus 6P but lacks specifics on root cause, affected components, remediation, or exploit status.

CVE-2016-3938

CVE-2016-3938 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_mdp_overlay.c) on several Android devices (Nexus 5X, Nexus 6, Nexus 6P, and Android One) with Android versions older than 2016-10-05. The vulnerability allows a locally installed application to escalate privileges due to...

CVE-2016-3860

CVE-2016-3860 affects the Qualcomm sound driver in Android, specifically the file sound/soc/msm/qdsp6v2/audio_calibration.c. The vulnerability allows a crafted application to disclose sensitive information due to an information-disclosure flaw in the Qualcomm sound device on Nexus 5X, Nexus 6P, a...

CVE-2016-3931

CVE-2016-3931 affects the Qualcomm QSEE Communicator driver (drivers/misc/qseecom.c) in Android. It enables local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P and Android One devices running pre-2016-10-05 builds. The vulnerability stems from the QSEE Communicator...

CVE-2016-6674

systemserver in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380...

CVE-2016-3929

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

CVE-2016-3926

CVE-2016-3926 is a Qualcomm component elevation-of-privilege issue affecting Nexus 5/5X/6/6P on Android, listed under the 2016-10-05 patch level. The vulnerability is described as part of Qualcomm AMSS/driver vulnerabilities with internal bug 28823953 and is marked as a critical issue in the Qual...

CVE-2016-6679

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR...

CVE-2016-3934

drivers/media/platform/msm/camerav2/sensor/io/msmcameraccii2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka...

CVE-2016-3940

The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 30141991...

CVE-2016-6683

CVE-2016-6683 is an information-disclosure vulnerability in the Android kernel affecting Nexus devices running before the 2016-10-05 patch. The issue, associated with internal bug 30143283, allows a crafted application to obtain sensitive information from kernel components. Connected documents co...

CVE-2016-6682

CVE-2016-6682 affects the Qualcomm QDSP6v2 driver: drivers/misc/qcom/qdsp6v2/audio_utils.c in Android on Nexus 5X, Nexus 6P, and Android One devices before 2016-10-05. Root cause: the code path fails to initialize certain data structures, enabling an attacker to obtain sensitive information via a...

CVE-2016-3933

Summary (CVE-2016-3933): Elevation of privilege in Mediaserver on Android allowed a crafted application to gain privileged execution. Affected devices include Nexus 9 and Pixel C. The issue is described in Android security bulletins as part of the October 2016 patch set, with security patch level...

CVE-2016-6686

CVE-2016-6686 is an information-disclosure vulnerability in the NVIDIA profiler on Android/Nexus 9 prior to 2016-10-05. A locally run, crafted application could leak sensitive information from the profiler. Connected sources indicate this issue is part of the Android 2016-10-01/2016-10-05 patch s...

CVE-2016-6677

The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30259955...

CVE-2016-3940

CVE-2016-3940 affects the Android Synaptics touchscreen driver on Nexus 6P and Android One devices, prior to the 2016-10-05 patch level. The issue allows a local attacker to escalate privileges through a crafted application, due to a vulnerability in the Synaptics touchscreen driver (internal bug...

CVE-2016-3929

CVE-2016-3929 is a Qualcomm component elevation/privilege issue in Android on Nexus 5X and 6P, caused by internal bug 28823675. Affected: Qualcomm components in Android prior to the 2016-10-05 patch. Severity: High (NVD CVSS v2/v3 show 9.8–10.0). Remediation: Android 2016-10-01/10-05 patch levels...