CVE-2016-3811

CVE-2016-3811 concerns an elevation-of-privilege vulnerability in the Android kernel video driver on Nexus 9 devices, prior to the 2016-07-05 patch level. The issue allows a local attacker with a crafted application to gain kernel privileges due to a bug in the kernel video driver (internal bug 2...

CVE-2014-9787

CVE-2014-9787 describes an integer overflow in drivers/misc/qseecom.c of the Qualcomm component used in Android on Nexus 7 (2013) devices. The vulnerability could allow a local attacker to gain privileges via a crafted application, due to the overflow in the Qualcomm qseecom driver. Public detail...

CVE-2015-8891

Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930...

CVE-2014-9777

The viddecsetmetabuffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bu...

CVE-2014-9779

arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679...

CVE-2015-8888

Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR81393...

CVE-2014-9780

The CVE-2014-9780 issue affects the Qualcomm mdp3_ctrl.c driver in Android before 2016-07-05 on Nexus 5, 5X, and 6P. It does not validate start and length values, enabling local privilege escalation via a crafted app. Root cause: improper input validation in the MDSS hardware block. Impact stated...

CVE-2016-3768

CVE-2016-3768 : Elevation of privilege in the Qualcomm performance component on Android before 2016-07-05 (Nexus 5/6/5X/6P/7 (2013)). Root cause: crafted app exploits Android internal bug 28172137 and Qualcomm bug CR1010644 to gain kernel privileges. Impact: local code execution with high/critica...

CVE-2014-9781

CVE-2014-9781 is a buffer overflow in drivers/video/fbcmap.c within the Qualcomm components of Android on Nexus 7 (2013) devices, prior to 2016-07-05. The underlying issue is a buffer overflow in the fbcmap driver that could allow a crafted application to escalate privileges. Affected stack: Andr...

CVE-2014-9793

platform/msmshared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567...

CVE-2016-3802

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28271368...

CVE-2016-3803

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28588434...

CVE-2014-9803

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020...

CVE-2014-9801

CVE-2014-9801 concerns Android components on Nexus 5 (Qualcomm) where multiple integer overflows in lib/libfdt/fdt_rw.c can be triggered by a crafted application to gain privileges. The issue is described as an Android internal bug 28822060 and a Qualcomm internal bug CR705078, affecting Qualcomm...

CVE-2014-9795

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bu...

CVE-2014-9779

CVE-2014-9779 affects the Android kernel component arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c (Qualcomm) on Nexus 5, where Android builds before 2016-07-05 allow an attacker to read kernel memory via a crafted offset. The entry identifies Android internal bug 28598347 and Qualcomm bug CR548679 as ...

CVE-2016-3768

The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28172137 and Qualcomm internal bug CR1010644...

CVE-2014-9782

drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug...

CVE-2014-9789

The 1 alloc and 2 free APIs in arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm interna...

CVE-2014-9787

Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764...