CVE-2014-9786: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28557260 and Qualcomm...

CVE-2016-3811: Undefined Security Weakness

The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28447556...

Android Qualcomm Bootloader Denial of Service Vulnerability

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA.The Qualcomm bootloader is a Qualcomm-developed bootloader that is used in the... Qualcomm bootloader is a Qualcomm-developed bootloader....

CVE-2016-3815: Exposure of Sensitive Information to an Unauthorized Actor

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28522274...

CVE-2016-3802: Undefined Security Weakness

The kernel filesystem implementation in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28271368...

CVE-2016-2503: Undefined Security Weakness

The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal bug CR1006067...

CVE-2015-8893: Improper Restriction of Operations within the Bounds of a Memory Buffer

app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to cause a denial of service OS outage or buffer over-read via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275...

CVE-2014-9800: Undefined Security Weakness

Integer overflow in lib/heap/heap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28822150 and Qualcomm internal bug CR692478...

CVE-2014-9803: Undefined Security Weakness

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28557020...

CVE-2015-8891: Undefined Security Weakness

Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930...

PT-2016-4053

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 6P devices Description The issue is related to the aboot implementation in the Qualcomm components in Android, which omits the recovery PIN feature. This has an unspecified impact and attack vector...

CVE-2015-8892: Undefined Security Weakness

platform/msmshared/bootverifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998...

CVE-2015-8889: Undefined Security Weakness

The aboot implementation in the Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which has unspecified impact and attack vectors, aka Android internal bug 28822677 and Qualcomm internal bug CR804067...

Android Qualcomm Component Mobilization Vulnerability

Android on Nexus 5X and 6P is an open source Linux-based operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm is one of the companies that use Qualcomm's device-specific Qualcomm components. device-specific Qualcomm component. A powe...

PT-2016-4056

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5X and 6P devices Description The issue allows attackers to bypass intended access restrictions via a digest with trailing data. Recommendations For Android versions prior to 2016-07-05 on Nexus 5X...

CVE-2016-2501: Undefined Security Weakness

The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 27890772 and Qualcomm internal bug CR1001092...

PT-2016-3539

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 on Nexus 5 devices Description The issue is related to the Qualcomm bootloader in Android, where the platform/msm shared/dev tree.c file does not properly check the relationship between tags addresses and...

CVE-2016-3814: Exposure of Sensitive Information to an Unauthorized Actor

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28193342...

CVE-2014-9783: Undefined Security Weakness

drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831 and Qualcomm internal bu...

CVE-2016-3793: Undefined Security Weakness

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28026625...