CVE-2016-6746: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission...

CVE-2016-6733: Undefined Security Weakness

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6750: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6732: Undefined Security Weakness

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6748: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-3906: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6698: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6730: Undefined Security Weakness

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

PT-2016-5735

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-11-05 Description An information disclosure issue in Qualcomm components, including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver, could allow a local malicious application to access...

CVE-2016-6731: Undefined Security Weakness

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6734: Undefined Security Weakness

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6752: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11126)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11128)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11130)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11131)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11129)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

CVE-2016-7383

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in a memory mapping API in the kernel mode layer nvlddmkm.sys handler, leading to denial of service or potential escalation of privileges...

CVE-2016-8808

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without...

Google Releases Supplemental Patch for Dirty Cow Vulnerability

Google’s November Android Security Bulletin, released Monday, patched 15 critical vulnerabilities and addressed 85 CVEs overall. But conspicuously absent is a fix for the Linux race condition vulnerability known as Dirty Cow Copy-on-Write that also impacts Android. While Google didn’t issue an...