Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the CORE/HDD/src/wlanhddhostapd.c file in the Qualcomm Wi-Fi driver for Android allows remote attackers to exploit the vulnerability to gain access to sensitive information via the 'setwpaie ioctl' function...

Android Qualcomm Cryptographic Engine Driver Integer Overflow Vulnerability (CNVD-2016-09523)

Android is an open source operating system based on Linux. An integer overflow vulnerability exists in the drivers/crypto/msm/qcedev.c file in Android's Qualcomm cryptographic engine driver, allowing remote attackers to exploit the vulnerability to build malicious applications with elevated...

Android Qualcomm component elevation of privilege vulnerability (CNVD-2016-09573)

Android is an open source operating system based on Linux. There is a security vulnerability in the Qualcomm component of Android that allows a remote attacker can exploit the vulnerability to build malicious applications and elevate privileges...

Android Qualcomm component elevation of privilege vulnerability (CNVD-2016-09563)

Android is an open source operating system based on Linux. There is a security vulnerability in the Qualcomm component of Android that allows a remote attacker can exploit the vulnerability to build malicious applications and elevate privileges...

Android Qualcomm IPA Driver Information Disclosure Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the drivers/platform/msm/ipa/ipaqmiservice.c file in the Qualcomm IPA driver for Android allows remote attackers to exploit the vulnerability to build malicious applications and obtain sensitive information...

Android Qualcomm component elevation of privilege vulnerability (CNVD-2016-09574)

Android is an open source operating system based on Linux. There is a security vulnerability in the Qualcomm component of Android that allows a remote attacker can exploit the vulnerability to build malicious applications and elevate privileges...

Android Qualcomm camera driver elevation of privilege vulnerability (CNVD-2016-09568)

Android is an open source operating system based on Linux. A security vulnerability in Android's Qualcomm camera driver allows a remote attacker can exploit the vulnerability to build malicious apps with elevated privileges...

Android Qualcomm MDSS Driver Denial of Service Vulnerability (CNVD-2016-09484)

Android is an open source operating system based on Linux. A security vulnerability in the drivers/video/msm/mdss/mdssmdppp.c file in the Qualcomm MDSS driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the application...

Android Qualcomm QDSP6v2 Driver Information Disclosure Vulnerability (CNVD-2016-09038)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Qualcomm QDSP6v2 driver is one of the Qualcomm digital signal processor drivers. An information disclosure vulnerability exists in the drivers/misc/qcom/qdsp6v2/audioutils.c file in...

Android Qualcomm QDSP6v2 Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Qualcomm QDSP6v2 driver is one of the Qualcomm digital signal processor drivers. An information disclosure vulnerability exists in the drivers/misc/qcom/qdsp6v2/audioutils.c file in...

Android - 'gpsOneXtra' Data Files Denial of Service

Exploit for Android platform in category dos / poc Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in AOSP and proprietary code in a Java XTRA...

USN-3099-4: Linux kernel (Qualcomm Snapdragon) vulnerabilities

Vladimír Beneš discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote attacker could use this to cause a stack corruption, leading to a denial of service system crash. CVE-2016-7039 Marco Grassi discovered a...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Exploit for Android platform in category local exploits Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in AOSP and proprietary code in a Java...

Google Android - 'gpsOneXtra' Data Files Denial of Service

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

Google Android - gpsOneXtra Data Files Denial of Service

Google Android - gpsOneXtra Data Files Denial of Service Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3099-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3099-4 advisory. Vladimr Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote...

CVE-2016-6696

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130...

CVE-2016-6696

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130...

CVE-2016-6695

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540...

CVE-2016-6695

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540...