CVE-2016-3858

CVE-2016-3858 is a local-privilege-escalation vulnerability caused by a buffer overflow in drivers/soc/qcom/subsystem_restart.c (Qualcomm subsystem driver) on Android devices. The issue affects Nexus 5X and 6P, where a crafted application sending a long string could escalate privileges. Public de...

CVE-2016-3864

CVE-2016-3864 affects the Qualcomm Radio Interface Layer in Android on Nexus 5, 5X, 6, 6P, and Android One devices prior to 2016-09-05. A crafted application can privilege-escalate to the attacker’s context via the RIL, per Android/Qualcomm bug references. Impact is local privilege escalation wit...

Patched Android Libutils Vulnerability Harkens Back to Stagefright

This week’s Android Security Bulletin patched a calamity of vulnerabilities that threatened almost every device in circulation and illustrated the fragility of the Android ecosystem. The bulletin addressed more than 50 vulnerabilities, including nine rated critical by Google because of the...

Google Shares Android Nougat, Safe Browsing Security Enhancements

Google this week shared with developers security enhancements it has added to the new Nougat version of Android and additional security features for webmasters via Safe Browsing to help pinpoint harmful content on websites. Under the banner of its nine-year-long Safe Browsing initiative, Google...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the app/aboot/aboot.c file of the Qualcomm Android operating system is due to a numerical overflow. Exploiting this vulnerability allows a local attacker to increase their privileges using a specially crafted boot image...

Google Patches Quadrooter Vulnerabilities in Android

The Quadrooter vulnerabilities made a lot of people take notice because the scale of affected Android devices more than 900,000 put it on a level with Stagefright and other bugs that impact a large majority of the Android ecosystem. Some details on the four vulnerabilities were publicly disclosed...

Qualcomm Innovation Center Android contributions for MSM integer overflow vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a program for MSM to support users in building Qualcomm chip products based on the Android platform and including other enhancements.Qualcomm Innovation Center QuIC Android patch is an Android patch package from QuIC. An integer...

Qualcomm Innovation Center Android contributions for MSM buffer overflow vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a program for MSM to support users in building Qualcomm chip products based on the Android platform and including other enhancements.Qualcomm Innovation Center QuIC Android patch is an Android patch package from QuIC. QuIC Android...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3070-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3070-3 advisory. A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/char/adsprpc.c file in Qualcomm’s Android operating system is related to insufficient checking of parameters and returned values. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially created application...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/video/msm/mdss/mdssmdppp.c file of Qualcomm’s Android operating system is related to an incorrect determination of the data size of the Gamut LUT. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or enhance their privileges

The vulnerability of the drivers/char/diag/diagdci.c file in Qualcomm’s Android operating system is due to a numerical overflow. Exploiting this vulnerability allows an attacker to increase their privileges or obtain confidential information through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the drivers/media/radio/radio-iris.c component of Qualcomm’s Android operating system is related to the use of an incorrect integer data type. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause a service failure buffer overflow...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/video/msm/vidc/common/enc/venc.c file in Qualcomm’s Android operating system is related to the lack of checking for the ioctl VENIOCTLGETSEQUENCEHDR call. Exploiting this vulnerability allows a remote attacker to increase their privileges through a specially creat...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm Android operating system’s component driver lies in the lack of checks for unique identifiers in the client DCI table. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Wi-Fi driver of the Qualcomm Android operating system is related to incorrect calls to the snprintf function. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure device freezing and reboots using specially crafted fram...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c file of Qualcomm’s Android operating system is related to insufficient checking of input parameters. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially created...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c file of Qualcomm’s Android operating system is related to insufficient checking of input parameters. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/char/diag/diagfwd.c file in Qualcomm’s Android operating system is related to improper handling of whole numbers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges through a specially created application...