Heap overflow

In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read...

CVE-2016-10343

In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak...

CVE-2016-5871

In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file...

UBUNTU-CVE-2016-5863

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

Vulnerability of Linux and Android operating systems, allowing attackers to increase their privileges

The vulnerability in the drivers/soc/qcom/spcom.c file of the SPCom driver for Qualcomm’s Android operating system and Linux kernel is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

The vulnerability of the Qualcomm operating system Android component, which allows a hacker to exert indefinite influence

The vulnerability of the Qualcomm operating system Android is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to cause unpredictable effects...

The vulnerability of the Qualcomm Android operating system’s driver allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm Android operating system’s driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the Qualcomm Android operating system’s crypto driver, allowing a hacker to execute arbitrary code

The vulnerability of Qualcomm’s Android operating system’s crypto driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Android operating system, which allows a malicious actor to compromise data privacy

The vulnerability of the Qualcomm Android operating system’s video driver is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

CVE-2016-8486

An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s Wi-Fi driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s camera is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malware application within the kernel context. This issue is considered “high” because it...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the initial loader of the Qualcomm Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Qualcomm’s Android operating system’s media codecs is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the app/aboot/aboot.c file of the Qualcomm Android operating system is due to a numerical overflow. Exploiting this vulnerability allows a local attacker to increase their privileges using a specially crafted boot image...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/media/platform/msm/camerav2/sensor/cci/msmcci.c file of the Qualcomm Android operating system is related to a missing unit error. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created application that sends...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/media/platform/msm/camerav2/sensor/csid/msmcsid.c component of Qualcomm’s Android operating system is related to the lack of checks for certain parameters. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

CVE-2016-5342

Heap-based buffer overflow in the wcnsswlanwrite function in drivers/net/wireless/wcnss/wcnsswlan.c in the wcnsswlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of...