CVE-2014-9789: Undefined Security Weakness

The 1 alloc and 2 free APIs in arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices do not validate parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28749392 and Qualcomm interna...

CVE-2014-9788: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the voice drivers in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28573112 and Qualcomm internal bug CR548872...

CVE-2016-3792: Undefined Security Weakness

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 2013 devices mishandles userspace data copying, which allows attackers to gain privileges via a crafted application, aka Android internal bug 27725204 and Qualcomm internal bug CR561022...

PT-2016-2429

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 9 devices Description The issue is related to the NVIDIA camera driver in Android, which lacks protection of internal data. This allows attackers to obtain sensitive information via a crafted...

PT-2016-2430

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 9 devices Description The issue is related to the NVIDIA camera driver in Android, which lacks protection of internal data. This allows attackers to obtain sensitive information via a crafted...

PT-2016-2442

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 9 devices Description The issue is related to the NVIDIA camera driver in Android, which has inadequate access control. This allows an attacker to gain privileges via a crafted application...

PT-2016-2450

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 9 devices Description The issue is related to the NVIDIA video driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application...

PT-2016-3530

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 devices Description The issue is related to multiple buffer overflows in the voice drivers in the Qualcomm components. This allows attackers to gain privileges via a crafted application...

PT-2016-3537

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue allows attackers to bypass intended access restrictions via a crafted boot image due to the lack of validation of the page size in the kernel header in th...

CVE-2015-8888: Undefined Security Weakness

Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header, aka Android internal bug 28822465 and Qualcomm internal bug CR81393...

Android Qualcomm Wi-Fi Driver Privilege Vulnerability

Android on Nexus 5X is an open source Linux-based operating system for the Nexus 5X smartphone developed by Google and the Open Handset Alliance OHA, for which Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver component. Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver componen...

PT-2016-3519

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue is related to the vid dec set meta buffers function in the Qualcomm components, which does not validate the number of buffers. This allows attackers to ga...

CVE-2014-9779: Undefined Security Weakness

arch/arm/mach-msm/qdsp6v2/msmaudioion.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to obtain sensitive information from kernel memory via a crafted offset, aka Android internal bug 28598347 and Qualcomm internal bug CR548679...

PT-2016-3526

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 and 7 2013 devices Description The issue is related to multiple buffer overflows in the diag debugfs.c file within the Qualcomm components. This allows attackers to gain privileges by using a...

CVE-2014-9795: Undefined Security Weakness

app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bu...

PT-2016-5166

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5X and 6P devices Description The issue allows attackers to gain privileges via a crafted application. Recommendations For Android versions prior to 2016-07-05 on Nexus 5X and 6P devices, update to...

CVE-2014-9782: Undefined Security Weakness

drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate direction and step parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug...

CVE-2014-9781: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471...

CVE-2014-9777: Improper Restriction of Operations within the Bounds of a Memory Buffer

The viddecsetmetabuffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bu...

CVE-2014-9787: Undefined Security Weakness

Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764...