CVE-2016-3769

CVE-2016-3769 refers to an elevation-of-privilege in the NVIDIA video driver on Android, specifically affecting Nexus 9 devices running versions prior to 2016-07-05. A crafted application can elevate privileges to compromise the kernel context. The Android security bulletin for 2016-07-01 / 2016-...

CVE-2015-8889

The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android internal bug 28822677 and Qualcomm internal bug CR804067...

CVE-2016-3802

CVE-2016-3802: Privilege-escalation in the Android kernel file system (Nexus 9) due to a fault in the kernel file system implementation. Local attacker could gain privileges via a crafted app. Exploitation status not provided in the documents. The issue is listed in the 2016-07-01/07-05 Android s...

CVE-2016-3802

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28271368...

CVE-2014-9801

CVE-2014-9801 concerns Android components on Nexus 5 (Qualcomm) where multiple integer overflows in lib/libfdt/fdt_rw.c can be triggered by a crafted application to gain privileges. The issue is described as an Android internal bug 28822060 and a Qualcomm internal bug CR705078, affecting Qualcomm...

CVE-2016-3814

CVE-2016-3814 : NVIDIA kernel driver’s camera component has a heap-buffer overwrite vulnerability that can cause denial of service. Connected docs confirm the heap-overwrite and DoS potential; no explicit remediation details are provided in the supplied materials.

CVE-2015-8891

Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930...

CVE-2016-3792

CVE-2016-3792 affects the Qualcomm Wi‑Fi driver in Android on Nexus 7 (2013) before 2016-07-05. The issue arises from mishandling userspace data copying in CORE/HDD/src/wlan_hdd_hostapd.c, enabling local privilege escalation via a crafted app (requires user interaction). References indicate this ...

CVE-2014-9786

CVE-2014-9786 describes a heap-based buffer overflow in the Qualcomm camera actuator driver (drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c) within Android on Nexus 5 and 7 (2013) devices prior to 2016-07-05. The underlying fault allows a crafted application to escalate privi...

CVE-2014-9798

platform/msmshared/devtree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service OS outage via a crafted application, aka Android internal bug...

CVE-2016-3815

CVE-2016-3815 concerns the NVIDIA camera driver in Android (notably on Nexus 9). The connected NVIDIA bulletin entry specifies a kernel camera driver issue described as a stack read of a user-controlled length, which can disclose sensitive information to a crafted app. The associated details plac...

CVE-2016-3797

The CVE-2016-3797 entry describes an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver on Android devices (Nexus 5X) prior to 2016-07-05. The issue could allow a locally running, crafted application to gain kernel-level privileges. The vulnerability is tied to Qualcomm internal bu...

CVE-2014-9799

CVE-2014-9799 concerns Android on Nexus 5 and 7 (2013) devices before 2016-07-05, where a Qualcomm makefile omits -fno-strict-overflow, potentially enabling local privilege escalation via crafted apps that exploit incorrect compiler optimization of an integer-overflow protection mechanism. The is...

CVE-2016-3807

The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196...

CVE-2016-3775

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28588279...

CVE-2016-3769

The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656...

CVE-2016-3775

The vulnerability CVE-2016-3775 concerns the Android kernel file system. A local, privilege-escalation flaw exists in the kernel file system on Nexus 5X, Nexus 6P, Nexus 6, Nexus Player, and Pixel C devices running affected Android versions prior to 2016-07-05, allowing a crafted application to g...

CVE-2016-3813

CVE-2016-3813 is an information-disclosure vulnerability in the Qualcomm USB driver affecting Android on Nexus 5, 5X, 6, and 6P prior to 2016-07-05. A local attacker could exfiltrate sensitive data via a crafted application due to Android internal bug 28172322 and Qualcomm internal bug CR1010222....

CVE-2015-8889

CVE-2015-8889 concerns the aboot implementation in Qualcomm components within Android on Nexus 6P devices, prior to the 2016-07-05 patch. The description notes that the recovery PIN feature is omitted, with impact and attack vectors listed as unspecified. Connected CNVD-2016-04846 and related CNV...

CVE-2014-9785

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747...