CVE-2015-8938

CVE-2015-8938 affects the MSM camera driver in Qualcomm components on Nexus 6 devices, where input parameter validation is incomplete, enabling privilege escalation via a crafted application. The issue is documented across multiple sources (e.g., CNVD-2016-06244) as a Nexus 6 privilege-acquisitio...

CVE-2015-8939

CVE-2015-8939 concerns a privilege-escalation flaw in the Qualcomm video driver used by Android on Nexus 7 (2013) . The issue stems from the driver file drivers/video/msm/mdp4_util.c , where data for the red/green/blue stages is not validated, enabling a local attacker with a crafted app to gain ...

CVE-2015-8940

Summary: CVE-2015-8940 describes an integer overflow in the Qualcomm sound driver component at sound/soc/msm/qdsp6v2/q6lsm.c on Nexus 6 devices running Android before 2016-08-05. The root cause is within the Qualcomm MSM qdsp6v2 driver, enabling a crafted application to escalate privileges locall...

CVE-2015-8940

Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28813987 and Qualcomm internal bug CR792367...

CVE-2015-8937

drivers/char/diag/diagcharcore.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 2013 devices mishandles a socket process, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803962 and Qualcomm internal bug CR770548...

CVE-2014-9874

Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted application, related to arch/arm/mach-msm/qdsp6v2/audioutils.c and sound/soc/msm/qdsp6v2/q6asm.c, aka Android internal bug 28751152 and...

CVE-2014-9900

The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...

CVE-2014-9876

CVE-2014-9876 affects Android with Qualcomm components on Nexus 5/5X/6/6P/7 (2013). The vulnerability is in drivers/char/diag/diagfwd.c, where mishandling of certain integer values allows privilege escalation via a crafted application (Android internal bug 28767796; Qualcomm CR483408). Exploitati...

CVE-2014-9863

The CVE-2014-9863 issue is a local privilege escalation in Android due to an integer underflow in the Qualcomm diag driver used on Nexus 5 and Nexus 7 (2013). A crafted app could exploit this to gain privileges or access sensitive data. Affected software is Android on Nexus devices prior to the 2...

CVE-2014-9863

Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470...

CVE-2014-9884

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain pointers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769920 and Qualcomm internal bug CR580740...

CVE-2014-9890

Off-by-one error in drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application that sends an I2C command, aka Android internal bug 28770207 and Qualcomm...

CVE-2014-9891

CVE-2014-9891 affects the Qualcomm qseecom driver (drivers/misc/qseecom.c) in Android on Nexus 5 devices prior to 2016-08-05. The issue arises from not validating certain buffer addresses, allowing a local attacker to escalate privileges via a crafted application that invokes an ioctl call. Impac...

CVE-2015-8937

CVE-2015-8937 concerns a privilege-escalation vulnerability in the Qualcomm component used by Android on Nexus devices (Nexus 5/6/7, 2013) due to mishandling a socket in drivers/char/diag/diagchar_core.c. The flaw allows a crafted application to gain privileges within the device context. Root cau...

CVE-2014-9872

The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...

CVE-2014-9898

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and...

CVE-2014-9897

sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain user-space data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28769856 and Qualcomm internal bu...

CVE-2014-9896

Technical details (affected product/component, root cause, impact, fix) are not publicly provided in the connected documents. Please monitor for updates from official advisories to obtain confirmed remediation guidance.

CVE-2015-8943

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

CVE-2014-9892

The sndcomprtstamp function in sound/core/compressoffload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize a timestamp data structure, which allows attackers to obtain sensitive information via a crafted applicatio...