CVE-2015-8890

platform/msmshared/partitionparser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate certain GUID Partition Table GPT data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard MMC, aka Android internal...

CVE-2015-8893

app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allows attackers to cause a denial of service OS outage or buffer over-read via a crafted application, aka Android internal bug 28822690 and Qualcomm internal bug CR822275...

CVE-2016-3813

The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28172322 and Qualcomm internal bug CR1010222...

CVE-2016-3815

CVE-2016-3815 concerns the NVIDIA camera driver in Android (notably on Nexus 9). The connected NVIDIA bulletin entry specifies a kernel camera driver issue described as a stack read of a user-controlled length, which can disclose sensitive information to a crafted app. The associated details plac...

CVE-2016-3815

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28522274...

CVE-2016-3813

CVE-2016-3813 is an information-disclosure vulnerability in the Qualcomm USB driver affecting Android on Nexus 5, 5X, 6, and 6P prior to 2016-07-05. A local attacker could exfiltrate sensitive data via a crafted application due to Android internal bug 28172322 and Qualcomm internal bug CR1010222....

CVE-2014-9788

Converged detail from CNVD-2016-04814 confirms CVE-2014-9788 is a buffer overflow in the Qualcomm sound driver in Android on Nexus 5 prior to 2016-07-05, exploitable by a crafted app to gain privileges. Root cause: overflow in the Qualcomm sound driver; Impact: local privilege escalation. A patch...

CVE-2014-9789

The CVE-2014-9789 issue affects the Qualcomm arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c code in Android on Nexus 5 prior to the 2016-07-05 patch level. The vulnerability stems from insufficient validation of parameters in the (1) alloc and (2) free APIs, enabling a crafted application to gain priv...

CVE-2014-9796

CVE-2014-9796 affects Android on Nexus 5 and Nexus 7 (2013) via the Qualcomm component’s app/aboot/aboot.c, where the kernel header page size is not validated, enabling a crafted boot image to bypass access restrictions. Public details are tied to Android/Qualcomm bug references (28820722, CR6847...

CVE-2014-9785

Affected software/hardware: Android on Nexus 7 (2013) with Qualcomm drivers, specifically drivers/misc/qseecom.c. Vulnerability details: The code path does not validate addresses before copying data, enabling a local attacker to gain privileges via a crafted application. Root cause is improper ad...

CVE-2014-9782

The CVE-2014-9782 issue concerns Qualcomm MSM camera actuator code (drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c) in Android on Nexus 5/7 (2013) devices. The root cause is lack of validation for direction and step parameters, enabling privilege escalation via a crafted app....

CVE-2014-9781

Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471...

CVE-2014-9802

CVE-2014-9802: Concrete details found in CNVD-2016-04811 and related records show an integer overflow in lib/libfdt/fdt.c within the Qualcomm component on Android, affecting Nexus 5 and Nexus 7 (2013) devices. Root cause: integer overflow in the FDT parser leads to privilege escalation when proce...

CVE-2014-9784

Multiple buffer overflows in drivers/char/diag/diagdebugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147...

CVE-2015-8888

CVE-2015-8888 affects the Qualcomm component in Android on Nexus 5. An integer overflow in the file app/aboot/aboot.c can be triggered by crafted block count and block size in a sparse header, allowing bypass of access restrictions. This is tied to Android prior to 2016-07-05 (Android bug 2882246...

CVE-2016-3775

The vulnerability CVE-2016-3775 concerns the Android kernel file system. A local, privilege-escalation flaw exists in the kernel file system on Nexus 5X, Nexus 6P, Nexus 6, Nexus Player, and Pixel C devices running affected Android versions prior to 2016-07-05, allowing a crafted application to g...

CVE-2014-9785

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747...

CVE-2014-9781

Buffer overflow in drivers/video/fbcmap.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28410333 and Qualcomm internal bug CR556471...

CVE-2014-9783

drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices does not validate certain values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28441831 and Qualcomm internal bu...

CVE-2014-9784

Multiple buffer overflows in drivers/char/diag/diagdebugfs.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28442449 and Qualcomm internal bug CR585147...