CVE-2016-6751

CVE-2016-6751 describes an information-disclosure vulnerability in Qualcomm components used by Android (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) where a local malicious app could access data outside its permissions. The root cause is information exposure within thes...

CVE-2016-6749

CVE-2016-6749 is an information-disclosure vulnerability in Qualcomm components used by Android (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) that could let a local malicious app access data outside its permissions if a privileged process is compromised. Android ID A-30...

CVE-2016-6750

CVE-2016-6750 denotes an information-disclosure vulnerability in Qualcomm components used by Android—specifically the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver. The issue could allow a local malicious app to access data outside its permission levels, but only after co...

CVE-2016-6752

CVE-2016-6752: An information-disclosure vulnerability in Qualcomm components (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) in Android prior to 2016-11-05 can allow a local malicious app to access data outside its permissions after compromising a privileged process. Aff...

CVE-2016-6740

CVE-2016-6740 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context after bypassing a privileged process. The issue is triggered locally and requires interaction with a privileged...

CVE-2016-6729

An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, whi...

CVE-2016-6739

CVE-2016-6739 is an elevation-of-privilege vulnerability in the Qualcomm camera driver on Android, allowing a local malicious app to execute arbitrary code in the kernel context. The issue requires compromising a privileged process and is described as a local attack with high impact (kernel integ...

CVE-2016-6698

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6749

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6751

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-3906

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-3907

An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as...

CVE-2016-6739

An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Androi...

CVE-2016-6725

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel...

CVE-2016-6738

CVE-2016-6738 is an elevation of privilege vulnerability in the Qualcomm crypto engine driver for Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. The description and related records...

CVE-2016-3904

CVE-2016-3904 is an elevation of privilege vulnerability in the Qualcomm bus driver affecting Android devices (Nexus 5X, Nexus 6P, Pixel, Pixel XL). The issue could allow a local malicious app to execute arbitrary code in the kernel context after compromising a privileged process. The vulnerabili...

Qualcomm and HackerOne Partner on Bounty Program

Qualcomm kicked off its first bug bounty program Thursday, opening the door for white hat hackers to find flaws in a dozen Snapdragon mobile chipsets and related software. Rewards for the invite-only bug bounty program top $15,000 each. HackerOne will facilitate Qualcomm’s bounty program; the...

USN-3128-3: Linux kernel (Qualcomm Snapdragon) vulnerability

Ondrej Kozina discovered that the keyring interface in the Linux kernel contained a buffer overflow when displaying timeout events via the /proc/keys interface. A local attacker could use this to cause a denial of service system crash...

Google Nexus Qualcomm bootloader elevation of privilege vulnerability

Android on Nexus 5 is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5, etc. Qualcomm bootloader is a Qualcomm bootloader that is used in the Nexus 5. Qualcomm bootloader is a Qualcomm-developed bootloader. An elevation of privileg...

Google Android Qualcomm Bus Driver Elevation of Privilege Vulnerability

Google Nexus 5X and others are smart devices from Google, Inc. in the U.S. Qualcomm bus is one of the Qualcomm bus components. An elevation of privilege vulnerability exists in Qualcomm bus in Google products. An attacker can exploit the vulnerability to execute arbitrary code in the kernel conte...