CVE-2014-9898: Exposure of Sensitive Information to an Unauthorized Actor

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28814690 and...

CVE-2014-9886: Improper Input Validation

arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815575 and Qualcomm interna...

CVE-2015-8943: Undefined Security Weakness

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

CVE-2015-8938: Undefined Security Weakness

The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022...

PT-2016-2616

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to an off-by-one error in the msm cci.c file, which is part of the Qualcomm components in the Android operating system. This error can be exploited by a remote attacker usin...

PT-2016-2539

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to the lack of image mode validation in the Qualcomm components. This could allow attackers to cause a denial of service or have other unspecified impacts via a crafted...

PT-2016-2597

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is caused by an integer overflow in the sound/soc/msm/qdsp6v2/q6lsm.c component of the Qualcomm operating system in Android. This can be exploited by a remote attacker using a speciall...

PT-2016-2598

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of num r stages, num g stages, and num b stages data in the drivers/video/msm/mdp4 util.c file of the Qualcomm component in Android. This allows...

PT-2016-2599

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 on Nexus 6 devices Description The issue is related to the MSM camera driver in the Qualcomm components in Android, which does not validate input parameters. This allows attackers to gain privileges via a...

PT-2016-2609

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the sound/soc/msm/qdsp6v2/msm-lsm-client.c file in the Qualcomm components of the Android operating system. It does not validate certain user-space data, which allows...

PT-2016-2627

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the mishandling of a user-space pointer in the msm actuator.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafted...

PT-2016-2637

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of the number of streams in the msm isp axi util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a...

PT-2016-2596

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the improper validation of array indexes in the msm isp axi util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafte...

PT-2016-2636

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to insufficient access control in the drivers/media/platform/msm/camera v2/sensor/csiphy/msm csiphy.c file of the Qualcomm components in Android. This allows attackers to ga...

PT-2016-2638

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of a certain parameter in the msm csid.c file, which allows attackers to gain privileges via a crafted application. This can be exploited by a remo...

PT-2016-2617

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of CPP frame messages in the msm cpp.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafted...

PT-2016-2635

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain index values in the msm isp stats util.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via ...

PT-2016-2633

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is caused by multiple buffer overflows in the msm isp util.c file within the Qualcomm components. This allows attackers to gain privileges via a crafted application. The estimated numb...

PT-2016-2595

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of the stream state in the msm cpp.c file, part of the Qualcomm components in Android. This allows attackers to gain privileges via a crafted...

CVE-2016-3762

The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application that uses 1 the AFMSMIPC socket class or 2 another socket class that is unrecognized by SELinux, aka internal bug 28612709...