Android Qualcomm Wi-Fi Driver Privilege Vulnerability

Android on Nexus 5X is an open source Linux-based operating system for the Nexus 5X smartphone developed by Google and the Open Handset Alliance OHA, for which Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver component. Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver componen...

Android Qualcomm Component Mobilization Vulnerability

Android on Nexus 5X and 6P is an open source Linux-based operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm is one of the companies that use Qualcomm's device-specific Qualcomm components. device-specific Qualcomm component. A powe...

Android Qualcomm Bootloader Denial of Service Vulnerability

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA.The Qualcomm bootloader is a Qualcomm-developed bootloader that is used in the... Qualcomm bootloader is a Qualcomm-developed bootloader....

CVE-2016-3802: Undefined Security Weakness

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28271368...

CVE-2016-3775: Undefined Security Weakness

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X, Nexus 6, Nexus 6P, Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28588279...

CVE-2016-3797: Undefined Security Weakness

The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28085680 and Qualcomm internal bug CR1001450...

CVE-2016-3803: Undefined Security Weakness

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28588434...

CVE-2016-3814: Exposure of Sensitive Information to an Unauthorized Actor

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28193342...

CVE-2014-9777: Improper Restriction of Operations within the Bounds of a Memory Buffer

The viddecsetmetabuffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bu...

CVE-2014-9788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872...

CVE-2014-9789: Undefined Security Weakness

The 1 alloc and 2 free APIs in arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm interna...

CVE-2015-8892: Undefined Security Weakness

platform/msmshared/bootverifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998...

CVE-2016-3769: Undefined Security Weakness

The NVIDIA video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28376656...

CVE-2016-3792: Undefined Security Weakness

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 2013 devices mishandles userspace data copying, which allows attackers to gain privileges via a crafted application, aka Android internal bug 27725204 and Qualcomm internal bug CR561022...

CVE-2016-3807: Undefined Security Weakness

The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196...

CVE-2015-8888: Undefined Security Weakness

Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR81393...

CVE-2014-9803: Undefined Security Weakness

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020...

CVE-2014-9798: Improper Access Control

platform/msmshared/devtree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service OS outage via a crafted application, aka Android internal bug...

CVE-2014-9778: Improper Restriction of Operations within the Bounds of a Memory Buffer

The viddecseth264mvbuffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal...

CVE-2014-9785: Undefined Security Weakness

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747...