CVE-2014-9894: Exposure of Sensitive Information to an Unauthorized Actor

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not ensure that certain name strings end in a '\0' character, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28749708 and Qualcom...

CVE-2014-9865: Improper Access Control

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly restrict user-space input, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28748271 and Qualcomm internal bug CR550013...

CVE-2014-9895: Exposure of Sensitive Information to an Unauthorized Actor

drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2014-9885: Undefined Security Weakness

Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application that provides format string specifiers in a name, aka Android internal bug 28769959 and Qualcomm...

CVE-2016-3855: Out-of-bounds Read

drivers/thermal/supplylmcore.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted application, aka Qualcomm...

PT-2016-2538

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of a certain count parameter in the drivers/thermal/supply lm core.c file of the Qualcomm components in Android. This allows attackers to cause a...

PT-2016-2598

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of num r stages, num g stages, and num b stages data in the drivers/video/msm/mdp4 util.c file of the Qualcomm component in Android. This allows...

PT-2016-2607

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the drivers/usb/host/ehci-msm2.c file in the Qualcomm components of the Android operating system. It omits certain minimum calculations before copying data, allowing...

PT-2016-2610

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to insufficient parameter and return value checking in the drivers/char/adsprpc.c file of Qualcomm components in the Android operating system. This can be exploited by a...

PT-2016-2620

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to a format string vulnerability in the drivers/thermal/qpnp-adc-tm.c component of Qualcomm in the Android operating system. This vulnerability can be exploited by a remote...

PT-2016-2621

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain pointers in the drivers/misc/qseecom.c file of the Qualcomm components in Android. This allows attackers to gain privileges via a crafte...

PT-2016-2618

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain length values in the drivers/misc/qseecom.c file of the Qualcomm components in Android. This allows attackers to gain privileges via a...

PT-2016-2624

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the use of an incorrect integer data type in the drivers/media/radio/radio-iris.c file of Qualcomm components in the Android operating system. This can be exploited by a...

PT-2016-2639

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the improper restriction of user-space input in the drivers/misc/qseecom.c file of the Qualcomm components in Android. This allows attackers to gain privileges via a...

Apple OS X Graphics Drivers Elevation of Privilege Vulnerability

Apple OS X is a specialized operating system developed for Mac computers. Apple OS X has a security vulnerability in Graphics Drivers that can be exploited by a local attacker to elevate privileges...

CVE-2016-4634

The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4634

The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

Memory corruption

The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4634

CVE-2016-4634 affects the Graphics Drivers component in OS X El Capitan (and OS X versions up to 10.11.x prior to 10.11.6). The issue enables a local attacker to gain privileges or cause a denial of service via memory corruption. Apple’s security content shows this vulnerability addressed in the ...

CVE-2016-4634

The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...