CVE-2016-5349

The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...

CVE-2016-5349

The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...

CVE-2016-5349

Technical details for CVE-2016-5349 are not provided in the connected documents. Public disclosures contain general descriptions only; no concrete product/vendor/version/root-cause or fix information is available here. Monitor for updates from official advisories.

CVE-2016-5349

The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...

Google Android Qualcomm Wi-Fi Driver elevation of privilege vulnerability (CNVD-2017-05232)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Audioserver is an audio server software. An elevation of privilege vulnerability exists in Google Android Qualcomm Wi-Fi Driver. An attacker can exploit the vulnerability to...

CVE-2016-5870

The msmipcrouterclose function in net/ipcrouter/ipcroutersocket.c in the ipcrouter component for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service NULL pointer dereference or...

Google Android Qualcomm Wi-Fi Driver Multiple Information Disclosure Vulnerabilities(CVE-2017-0531)

No description provided by source. include include include include include include include define SNDRVLSMLABCONTROL IOW'U', 0x08, uint32t int mainvoid int fd; int ret; fd = open"/dev/snd/pcmC0D30c", ORDWR; if fd 0 printf"Couldn't open device, error %s\n", strerrorerrno; return -1; printf"Phone...

Google Android Qualcomm Camera Driver Multiple Information Disclosure Vulnerabilities（CVE-2016-8477）

No description provided by source. include include include include include include include include include define MAXSENSORNAME 32 enum eepromcfgtypet CFGEEPROMGETINFO, CFGEEPROMGETCALDATA, CFGEEPROMREADCALDATA, CFGEEPROMWRITEDATA, CFGEEPROMGETMMINFO, ; struct eepromgett uint32t numbytes; ; struc...

Google Android Qualcomm Camera Driver Multiple Information Disclosure Vulnerabilities（CVE-2016-8413）

No description provided by source. include include include include include include include include include struct msmcamerav4l2ioctlt uint32t id; sizet len; int32t transcode; void user ioctlptr; ; define VIDIOCMSMCPPDEQUEUESTREAMBUFFINFO \ IOWR'V', BASEVIDIOCPRIVATE + 7, struct msmcamerav4l2ioctl...

Elevation of privilege vulnerability in Qualcomm crypto engine driver(CVE-2017-0576)

No description provided by source. include include include include include include include include include include / PoC By Scott Bauer Bug found by derrek / static const char dev = "/dev/qce"; define QCEDEVMAXKEYSIZE 64 define QCEDEVMAXIVSIZE 32 define QCEDEVMAXBUFFERS 16 struct bufinfo union...

Google Android Qualcomm Camera Driver Multiple Privilege Escalation Vulnerabilities (CVE-2017-0521)

No description provided by source. include include include include include include include include include include //include include / Should be same as VIDEOMAXPLANES in videodev2.h / define MAXPLANES VIDEOMAXPLANES / PARTIALFRAMESTRIPECOUNT must be even / define PARTIALFRAMESTRIPECOUNT 4 define...

CVE-2016-10230

A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR1091408...

Multiple security vulnerabilities in QNAP Qualcomm components

QNAP is a Turbo NAS operating system developed by QNAP Systems. The QNAP QTAP Qualcomm component has multiple security vulnerabilities, including command injection and information leakage vulnerabilities. An attacker can exploit the vulnerabilities to execute arbitrary code, bypass security...

Google Android Qualcomm SPCom Driver Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm SPCom Driver is a serial communication driver component. A security vulnerability exists in the Qualcomm SPCom Driver in versions of Android prior to 7.0. A loca...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

Code injection

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

UBUNTU-CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...