CVE-2016-3858

CVE-2016-3858 is a local-privilege-escalation vulnerability caused by a buffer overflow in drivers/soc/qcom/subsystem_restart.c (Qualcomm subsystem driver) on Android devices. The issue affects Nexus 5X and 6P, where a crafted application sending a long string could escalate privileges. Public de...

CVE-2016-3892

CVE-2016-3892 affects the Qualcomm SPMI driver in Android prior to 2016-09-05 on Nexus 5, 5X, 6 and 6P. The issue is an information-disclosure vulnerability that allows a crafted Android application to obtain sensitive data due to flaws in the SPMI driver. Impact is described as partial confident...

CVE-2016-3894

CVE-2016-3894 (Android/Qualcomm DMA component) details: The Nexus 6 Qualcomm DMA component prior to 2016-09-05 is affected by an information disclosure vulnerability exploitable by a crafted Android application, enabling local access to sensitive data. Root cause is in the Qualcomm DMA component;...

CVE-2016-3865

CVE-2016-3865 affects the Synaptics touchscreen driver in Android on Nexus 5X and Nexus 9, before 2016-09-05. The flaw enables local privilege escalation via a crafted app, caused by elevated-privilege execution within the kernel context. Publicly available patch information is limited; some sour...

CVE-2016-3894

The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29618014 and Qualcomm internal bug CR1042033...

CVE-2016-3859

The CVE-2016-3859 issue affects the Qualcomm camera driver in Android on Nexus 5, 5X, 6, and 6P prior to 2016-09-05. The root cause is an elevation of privilege via a crafted application, allowing a local attacker to gain higher privileges within the device. The Android security bulletin notes th...

CVE-2016-3873

CVE-2016-3873 affects the NVIDIA kernel on Android (Nexus 9) prior to 2016-09-05. An attacker can gain privileges via a crafted application due to improper validation in the DVS Framework input, aka internal bug 29518457. Connected sources confirm affected platform (Android/Nexus 9) and root caus...

CVE-2016-3867

The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897...

Google Patches Quadrooter Vulnerabilities in Android

The Quadrooter vulnerabilities made a lot of people take notice because the scale of affected Android devices more than 900,000 put it on a level with Stagefright and other bugs that impact a large majority of the Android ecosystem. Some details on the four vulnerabilities were publicly disclosed...

Android Security Bulletin—September 2016Stay organized with collectionsSave and categorize content based on your preferences.

ded The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

Android 6.0.0 MDA89E / 6.0.1 MMB29V OEM Panic

Vulnerable versions: ================ Android 6.0.0 MDA89E through 6.0.1 MMB29V bootloaders bhz10i/k Non-vulnerable versions: ==================== Android 6.0.1 MHC19J bootloader bhz10m and above. Details: ====== The attacker reboots the phone into the 'fastboot' mode. A physical attacker can do...

Patch Fixes Nexus 5X Lock-Screen Bypass Vulnerability

Google’s Android security team has patched a vulnerability that left Nexus 5X devices open to attack even if the phone’s screen was locked. The vulnerability in Google’s line of phones would have allowed an adversary to exfiltrate data from the targeted phone via a forced memory dump of the devic...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06289)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5, 7devices An elevation of privilege vulnerability exists that allows an attacker to gain privileges via a carefully crafted mask value provided by the application...

Android on Nexus Information Disclosure Vulnerability (CNVD-2016-06223)

Android on Nexus 5 and 7 is an open source operating system for the Nexus 5 and 7 smartphones based on Linux, developed by Google and the Open Handset Alliance OHA.The Linux kernel is the kernel used by Linux, the operating system released by the Linux Foundation in the United States. Linux kerne...

Android on Nexus Qualcomm Component Formatting String Vulnerability

Android on Nexus 5 is an open source Linux-based operating system for the Nexus 5 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06233)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06247)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

Android on Nexus Buffer Overflow Vulnerability

Android on Nexus 7 is an open source Linux-based operating system for the Nexus 7 Tablet PC developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver component used in it. Qualcomm Wi-Fi driver is one of the components used in the...

Android on Nexus devices buffer overflow vulnerability

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5, 5X, 6P,7 devices suffers from a buffer overflow vulnerability that allows attackers to gain privileges via a crafted application...

Android on Nexus devices elevation of privilege vulnerability (CNVD-2016-06293)

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from an elevation of privilege vulnerability that allows attackers to gain privileges through a crafted application...