CVE-2016-6691

service/jni/comandroidserverwifiGbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service framework crash or possibly have unspecified other impact via an access point that has a malformed SSID with GBK encoding, aka Qualcom...

CVE-2016-6679

CVE-2016-6679 affects Qualcomm Wi‑Fi driver in Android on Nexus 5X and Android One devices, targeting CORE/HDD/src/wlan_hdd_hostapd.c. A crafted app calling setwpaie ioctl can disclose sensitive information. Affected OS versions are Android before 2016-10-05. The vulnerability is documented in th...

CVE-2015-8951

Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm...

CVE-2016-6675

Off-by-one error in CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a linkspeed ioctl call, aka Android...

CVE-2016-3903

drivers/media/platform/msm/camerav2/sensor/csid/msmcsid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29513227 and Qualcomm...

CVE-2016-3931

drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418...

CVE-2016-6696

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130...

CVE-2016-6675

This CVE (CVE-2016-6675) is a buffer/size difference (off-by-one) vulnerability in the Qualcomm Wi‑Fi driver’s CORE/HDD wlan_hdd_hostapd.c. Affected devices include Android on Nexus 5X and Android One, with exploitation via a crafted application that invokes the linkspeed ioctl, enabling local pr...

CVE-2016-3935

Concretely documented vulnerability: CVE-2016-3935 is an integer-overflow flaw in the Qualcomm cryptographic engine driver (drivers/crypto/msm/qcedev.c) that affects Android on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is multiple integer overflows in qcedev.c, which can en...

CVE-2016-3927

CVE-2016-3927 is a Qualcomm component elevation/privilege issue described in the 2016-10-01 Android bulletin. Affected devices are Nexus 5X and Nexus 6P; the root cause is listed as Qualcomm internal (A-28823244) with Critical impact. The bulletins do not publicly disclose the exact vulnerability...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

CVE-2016-6693

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585...

CVE-2016-3903

CVE-2016-3903 is a vulnerability in the Qualcomm camera driver (drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c) affecting Android on Nexus 5, 5X, 6, 6P and Android One, prior to the Oct 5, 2016 patch. The connected CNVD entry notes an integer overflow in the Qualcomm camera driver, w...

CVE-2016-6695

CVЕ-2016-6695 : Affects the Qualcomm QDSP6v2 driver (sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c) in Android before 2016-10-05. An attacker could cause a denial of service or other unspecified impact via crafted visualizer data length. This entry is part of Qualcomm component vulnerabilities in th...

CVE-2016-3939

CVE-2016-3939 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_debug.c) in Android on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is in the Qualcomm mdss_debug path that allows a crafted application to gain privileges locally. Public details indicate an elevatio...

CVE-2016-6681

CVE-2016-6681 describes an information disclosure vulnerability in the Qualcomm QDSP6v2 driver (drivers/misc/qcom/qdsp6v2/audio_utils.c) on Android devices prior to 2016-10-05, affecting Nexus 5X, Nexus 6P, and Android One. The issue stems from not initializing certain data structures, allowing a...

CVE-2016-3905

CVE-2016-3905 affects the Qualcomm Wi‑Fi driver (CORE/HDD/wlan_hdd_main.c) in Android, before the 2016-10-05 patch, on Nexus 5X. A crafted application sending SENDACTIONFRAME can elevate privileges locally. The issue is documented with a High impact (CVE-2016-3905) and a CVSS3 base score of 7.8, ...

CVE-2016-6681

drivers/misc/qcom/qdsp6v2/audioutils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2016-6676

Off-by-one error in CORE/HDD/src/wlanhddcfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service buffer overflow via a crafted application that makes a GETCFG ioctl call, aka Android intern...

CVE-2016-3938

CVE-2016-3938 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_mdp_overlay.c) on several Android devices (Nexus 5X, Nexus 6, Nexus 6P, and Android One) with Android versions older than 2016-10-05. The vulnerability allows a locally installed application to escalate privileges due to...