CVE-2014-9870

The CVE-2014-9870 entry concerns the Linux kernel prior to 3.11 on ARM, including Android devices (Nexus 5/7) before 2016-08-05. It exposes a privilege-escalation path via improper handling of user-space access to the TPIDRURW register, enabling local attackers to gain privileges with a crafted a...

CVE-2014-9864

The CVE-2014-9864 entry concerns Android on Nexus devices (Nexus 5/7 2013) where drivers/misc/qseecom.c in Qualcomm components does not validate ioctl calls, enabling privilege escalation via a crafted app. Connected docs are not provided here, but the description states the flaw allows local pri...

CVE-2014-9898

CVE-2014-9898 affects Android on Nexus 5 and Nexus 7 (2013) devices due to a flaw in arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c where input parameters are not properly validated. This enables a crafted application to obtain sensitive information. The issue is associated with Android internal bug ...

CVE-2014-9895

Technical details for CVE-2014-9895 are not publicly available in the provided documents. The materials reference an information disclosure in media-device.c but do not specify affected versions, root cause, impact, or fixes within this corpus. Monitor for updates.

CVE-2015-8942

Summary of CVE-2015-8942 (CVE entry) : In Android on Nexus 6, the Qualcomm component driver at drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c fails to validate the stream state, enabling a local attacker with a crafted application to gain privileges. The issue is tied to the Qualcomm in...

CVE-2014-9870

The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and...

CVE-2014-9891

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which allows attackers to gain privileges via a crafted application that makes an ioctl call, aka Android internal bug 28749283 and Qualcomm internal bug...

CVE-2014-9864

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747998 and Qualcomm internal bug CR561841...

CVE-2014-9874

CVE-2014-9874 is a buffer overflow in Qualcomm components of Android (before 2016-08-05) affecting Nexus 5, 5X, 6P and 7 (2013). The root cause is memory corruption in audio_utils.c and q6asm.c (Android internal bug 28751152; Qualcomm bug CR563086). Impact is privilege escalation via a crafted ap...

CVE-2014-9884

CVE-2014-9884 affects Android on Nexus 5 and Nexus 7 (2013) via drivers/misc/qseecom.c in Qualcomm components. The root cause is that qseecom.c does not validate certain pointers, enabling a local attacker with a crafted app to gain privileges. Connected sources corroborate a privilege-escalation...

CVE-2014-9865

CVE-2014-9865 affects Android on Nexus 5 and Nexus 7 (2013) due to improper input restriction in drivers/misc/qseecom.c within Qualcomm components, enabling privilege escalation via a crafted application. Affected description notes elevation of privilege through user-space input, linked to Androi...

CVE-2014-9878

CVE-2014-9878 affects Android on Nexus 5 with the Qualcomm MMC component. The vulnerable code is drivers/mmc/card/mmc_block_test.c in Qualcomm components, where kernel-space buffer addresses are not rejected. This allows a local attacker with a crafted application to gain privileges. The issue is...

CVE-2014-9882

Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28769546 and Qualcomm internal bug CR552329...

CVE-2014-9882

CVE-2014-9882 is a buffer overflow in drivers/media/radio/radio-iris.c within the Qualcomm component used on Android devices (notably Nexus 7 2013). Exploitation via a crafted application could allow an attacker to gain privileges on the device. Multiple connected sources corroborate this issue a...

CVE-2014-9875

CVE-2014-9875 affects Android on Nexus 7 (2013) prior to 2016-08-05. The vulnerability is in drivers/char/diag/diag_dci.c of Qualcomm components and allows privilege escalation via a crafted application that sends short DCI request packets (Android internal bug 28767589; Qualcomm bug CR483310). P...

CVE-2014-9890

CVE-2014-9890 describes an off-by-one error in the MSM camera_v2 CCI driver (Qualcomm components) used on Nexus 5 and Nexus 7 (2013). The vulnerability allows a local attacker to gain privileges by sending a crafted I2C command, due to a boundary handling flaw in msm_cci.c. Affected firmware is A...

CVE-2014-9868

CVE-2014-9868 affects Qualcomm MSM camera_v2 sensor code (msm_csiphy.c) in Android prior to 2016-08-05 on Nexus 5 and Nexus 7 (2013). A crafted mask value provided by an application can lead to privilege escalation. The vulnerability is documented in the Android/Qualcomm context and is addressed ...

CVE-2014-9891

CVE-2014-9891 affects the Qualcomm qseecom driver (drivers/misc/qseecom.c) in Android on Nexus 5 devices prior to 2016-08-05. The issue arises from not validating certain buffer addresses, allowing a local attacker to escalate privileges via a crafted application that invokes an ioctl call. Impac...

CVE-2014-9865

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly restrict user-space input, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28748271 and Qualcomm internal bug CR550013...

CVE-2014-9893

drivers/video/msm/mdss/mdssmdppp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine the size of Gamut LUT data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28747914 and Qualcomm...