CVE-2015-8942

Summary of CVE-2015-8942 (CVE entry) : In Android on Nexus 6, the Qualcomm component driver at drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c fails to validate the stream state, enabling a local attacker with a crafted application to gain privileges. The issue is tied to the Qualcomm in...

CVE-2014-9867

drivers/media/platform/msm/camerav2/isp/msmispaxiutil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate the number of streams, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749629 and Qualcom...

CVE-2014-9892

The sndcomprtstamp function in sound/core/compressoffload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted applicatio...

CVE-2014-9870

The CVE-2014-9870 entry concerns the Linux kernel prior to 3.11 on ARM, including Android devices (Nexus 5/7) before 2016-08-05. It exposes a privilege-escalation path via improper handling of user-space access to the TPIDRURW register, enabling local attackers to gain privileges with a crafted a...

CVE-2014-9899

CVE-2014-9899 describes an information-disclosure flaw in the USB/ehci-msm2.c driver within Qualcomm components used by Android on Nexus 5 devices prior to 2016-08-05. The root cause is omission of certain minimum calculations before copying data, enabling a crafted application to obtain sensitiv...

CVE-2014-9865

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly restrict user-space input, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28748271 and Qualcomm internal bug CR550013...

CVE-2014-9893

drivers/video/msm/mdss/mdssmdppp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm...

CVE-2014-9900

CVE-2014-9900 affects the Linux kernel (ethtool_get_wol in net/core/ethtool.c) up to version 4.7. It can leak kernel memory due to uninitialized data, enabling local information disclosure. Reported impact seen on Android devices (Nexus 5/2013 era) with Android before 2016-08-05. Public advisorie...

CVE-2014-9871

Multiple buffer overflows in drivers/media/platform/msm/camerav2/isp/msmisputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28749803 and Qualcomm internal bug CR51471...

CVE-2015-8943

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

CVE-2015-8943

CVE-2015-8943 affects Qualcomm/mdss mdss_mdp_util.c in Android on Nexus 5 prior to 2016-08-05. The root cause is that the code does not verify the existence of a mapping before unmapping, enabling privilege escalation via a crafted app. Connected sources (CNVD-2016-06202, Ubuntu/OSV entries, NVD ...

CVE-2014-9884

CVE-2014-9884 affects Android on Nexus 5 and Nexus 7 (2013) via drivers/misc/qseecom.c in Qualcomm components. The root cause is that qseecom.c does not validate certain pointers, enabling a local attacker with a crafted app to gain privileges. Connected sources corroborate a privilege-escalation...

CVE-2014-9880

CVE-2014-9880 affects Android on Nexus 7 (2013) via Qualcomm drivers: the venc.c video engine fails to validate VEN_IOCTL_GET_SEQUENCE_HDR ioctl, enabling privilege escalation with a crafted app. Root cause: lack of validation in drivers/video/msm/vidc/common/enc/venc.c. Android bug 28769352 and ...

CVE-2014-9898

CVE-2014-9898 affects Android on Nexus 5 and Nexus 7 (2013) devices due to a flaw in arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c where input parameters are not properly validated. This enables a crafted application to obtain sensitive information. The issue is associated with Android internal bug ...

CVE-2015-8941

CVE-2015-8941 affects Qualcomm components within Android on Nexus 6 and Nexus 7 (2013). The issue is in drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c where array index validation is improper, allowing a local attacker with a crafted app to gain privileges. The report notes an Androi...

CVE-2014-9884

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain pointers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769920 and Qualcomm internal bug CR580740...

CVE-2014-9888

arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not prevent executable DMA mappings, which might allow local users to gain privileges via a crafted application, aka Android internal bug 28803642 a...

CVE-2014-9897

CVE-2014-9897 affects Android on Nexus 5, in Qualcomm components (sound/soc/msm/qdsp6v2/msm-lsm-client.c). The vulnerability arises because the code path in msm-lsm-client.c does not validate certain user-space data, enabling an attacker to obtain sensitive information via a crafted application. ...

CVE-2015-8939

drivers/video/msm/mdp4util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug...

CVE-2015-8944

The ioresourcesinit function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 2013 devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug...