5448 matches found
CVE-2014-9864
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747998 and Qualcomm internal bug CR561841...
CVE-2014-9872
The CVE-2014-9872 entry concerns the Qualcomm diag driver in Android on Nexus 5 prior to 2016-08-05. The issue is that the diag driver does not ensure unique identifiers in a DCI client table, which could allow a crafted application to escalate privileges. The vulnerability is tied to Android int...
CVE-2014-9876
CVE-2014-9876 affects Android with Qualcomm components on Nexus 5/5X/6/6P/7 (2013). The vulnerability is in drivers/char/diag/diagfwd.c, where mishandling of certain integer values allows privilege escalation via a crafted application (Android internal bug 28767796; Qualcomm CR483408). Exploitati...
CVE-2014-9879
The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769221 and Qualcomm internal bug CR524490...
CVE-2014-9878
CVE-2014-9878 affects Android on Nexus 5 with the Qualcomm MMC component. The vulnerable code is drivers/mmc/card/mmc_block_test.c in Qualcomm components, where kernel-space buffer addresses are not rejected. This allows a local attacker with a crafted application to gain privileges. The issue is...
CVE-2014-9886
CVE-2014-9886 affects Android on Nexus 5 and Nexus 7 (2013) devices, specifically the Qualcomm component under arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c. The vulnerability is caused by improper validation of input parameters in USF, enabling a local attacker to gain privileges via a crafted appl...
CVE-2014-9900
The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...
CVE-2014-9864
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747998 and Qualcomm internal bug CR561841...
UBUNTU-CVE-2014-9900
The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...
CVE-2014-9900
The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...
UBUNTU-CVE-2015-8944
The ioresourcesinit function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 2013 devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug...
CVE-2016-3857
The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518...
DEBIAN-CVE-2016-3857
The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518...
CVE-2016-3857
The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518...
CVE-2016-3853
Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208...
CVE-2016-3853
Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208...
CVE-2016-3851
The LG Electronics bootloader Android before 2016-08-05 on Nexus 5X devices allows attackers to gain privileges by leveraging access to a privileged process, aka internal bug 29189941...
CVE-2016-3851
The LG Electronics bootloader Android before 2016-08-05 on Nexus 5X devices allows attackers to gain privileges by leveraging access to a privileged process, aka internal bug 29189941...