CVE-2016-6740

CVE-2016-6740 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context after bypassing a privileged process. The issue is triggered locally and requires interaction with a privileged...

CVE-2016-6729

An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, whi...

CVE-2016-6739

CVE-2016-6739 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious app to execute arbitrary code in the kernel context. The issue requires compromising a privileged process and is described as a local attack with high impact (kernel integ...

CVE-2016-6698

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6749

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6751

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-3906

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-3907

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6739

An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Androi...

CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

CVE-2016-6738

CVE-2016-6738 is an elevation of privilege vulnerability in the Qualcomm crypto engine driver for Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. The description and related records...

CVE-2016-3904

An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android I...

CVE-2016-3904

CVE-2016-3904 is an elevation of privilege vulnerability in the Qualcomm bus driver affecting Android devices (Nexus 5X, Nexus 6P, Pixel, Pixel XL). The issue could allow a local malicious app to execute arbitrary code in the kernel context after compromising a privileged process. The vulnerabili...

Qualcomm and HackerOne Partner on Bounty Program

Qualcomm kicked off its first bug bounty program Thursday, opening the door for white hat hackers to find flaws in a dozen Snapdragon mobile chipsets and related software. Rewards for the invite-only bug bounty program top $15,000 each. HackerOne will facilitate Qualcomm’s bounty program; the...

USN-3128-3: Linux kernel (Qualcomm Snapdragon) vulnerability

Ondrej Kozina discovered that the keyring interface in the Linux kernel contained a buffer overflow when displaying timeout events via the /proc/keys interface. A local attacker could use this to cause a denial of service system crash...

Google Nexus Qualcomm bootloader elevation of privilege vulnerability

Android on Nexus 5 is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5, etc. Qualcomm bootloader is a Qualcomm bootloader that is used in the Nexus 5. Qualcomm bootloader is a Qualcomm-developed bootloader. An elevation of privileg...

Google Nexus Qualcomm Crypto Engine Driver Elevation of Privilege Vulnerability

Google Nexus 5X and others are smart devices from Google USA.Qualcomm crypto engine is one of the Qualcomm crypto engine drivers. An elevation of privilege vulnerability exists in the Qualcomm crypto engine driver in Google products. An attacker can exploit this vulnerability to execute arbitrary...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerability (USN-3128-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3128-3 advisory. Ondrej Kozina discovered that the keyring interface in the Linux kernel contained a buffer overflow when displaying timeout events via the /proc/keys interface. A...

Google Android Qualcomm Bus Driver Elevation of Privilege Vulnerability

Google Nexus 5X and others are smart devices from Google, Inc. in the U.S. Qualcomm bus is one of the Qualcomm bus components. An elevation of privilege vulnerability exists in Qualcomm bus in Google products. An attacker can exploit the vulnerability to execute arbitrary code in the kernel conte...

Google Nexus Qualcomm Crypto Driver Remote Code Execution Vulnerability

Android on Nexus 5X is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X smart device, etc. The Qualcomm crypto driver is one of the Qualcomm crypto drivers. The Qualcomm crypto driver is one of the Qualcomm crypto drivers. A remote...