CVE-2016-6779

CVE-2016-6779 is a local elevation-of-privilege in the HTC sound codec driver affecting Android kernel 3.10 (Nexus 9). The vulnerability could let a local malicious application execute arbitrary code in the kernel context if it can compromise a privileged process. The issue is categorized as High...

CVE-2016-8392

CVE-2016-8392 is a local privilege-escalation in the Qualcomm sound driver affecting Android devices (Nexus 5X/6/6P, Android One, Pixel/Pixel XL) via the kernel context. The vulnerability could let a malicious local app execute arbitrary code in the kernel after compromising a privileged process....

CVE-2016-6779

An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6778

CVE-2016-6778 is an Elevation of Privilege affecting the Android kernel path via the HTC sound codec driver. The vulnerability could let a local malicious application execute arbitrary kernel code, requiring initial compromise of a privileged process before exploitation. Affected stack: Android o...

CVE-2016-6791

CVE-2016-6791 is an elevation-of-privilege vulnerability in the Qualcomm sound driver affecting Android devices. The issue allows a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. Affected components/versions inclu...

CVE-2016-8410

CVE-2016-8410 is an information-disclosure vulnerability in the Qualcomm sound driver affecting Android devices. The issue could allow a local malicious application to access data outside its permission levels, and is rated Moderate because exploitation requires first compromising a privileged pr...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3168-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3168-1 advisory. Dmitry Vyukov discovered that the KVM implementation in the Linux kernel did not properly initialize the Code Segment CS in certain error cases. A local...

Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3169-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3169-3 advisory. Baozeng Ding discovered a race condition that could lead to a use-after- free in the Advanced Linux Sound Architecture ALSA subsystem of the Linux kernel...

Multiple Google Devices Qualcomm Sound Driver Elevation of Privilege Vulnerabilities

Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a Qualcomm-developed sound driver used in the Nexus 5X. Qualcomm Sound Driver is a sound driver developed by Qualcomm. The...

Security update for xen (important)

This updates xen to version 4.5.5 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable...

CVE-2016-9794

Race condition in the sndpcmperiodelapsed function in sound/core/pcmlib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted SNDRVPCMTRIGGERSTART command...

UBUNTU-CVE-2016-9794

Race condition in the sndpcmperiodelapsed function in sound/core/pcmlib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted SNDRVPCMTRIGGERSTART command...

gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder

A memory corruption flaw was found in GStreamer's Nintendo NSF music file format decoding plug-in. A remote attacker could use this flaw to cause an application using GStreamer to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

CVE-2016-4578

A vulnerability was found in Linux kernel. There is an information leak in file sound/core/timer.c of the latest mainline Linux kernel. The stack object “r1” has a total size of 32 bytes. Its field “event” and “val” both contain 4 bytes padding. These 8 bytes padding bytes are sent to user withou...

CVE-2016-4569

A vulnerability was found in Linux kernel. There is an information leak in file "sound/core/timer.c" of the latest mainline Linux kernel, the stack object “tread” has a total size of 32 bytes. It contains a 8-bytes padding, which is not initialized but sent to user via copytouser, resulting a...

Google Android Qualcomm Sound Driver Information Disclosure Vulnerability

Android on Nexus 5X is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm Sound Driver is a Qualcomm-developed sound driver used in the Nexus 5X. Qualcomm Sound Driver is a sound driver developed by Qualcomm. An...

Google Nexus Qualcomm Sound driver elevation of privilege vulnerability (CNVD-2016-12201)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. A power lifting vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google devices. The...

Google Nexus Qualcomm Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google...

Google Nexus Qualcomm Sound driver elevation of privilege vulnerability (CNVD-2016-12200)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google...

Linux kernel 'sound/core/pcm_lib.c' memory misreference vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A memory misreference vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to cause a denial of service memory consumption...