CVE-2015-8951

Technical details are not publicly available in the provided connected documents. The CVE entry mentions use-after-free in the Qualcomm sound driver affecting Nexus devices, but no concrete vendor/version/fix details are supplied here. Monitor for updates.

CVE-2015-8951

Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm...

CVE-2016-3929

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

CVE-2016-3938

drivers/video/msm/mdss/mdssmdpoverlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 30019716 and Qualcomm internal bug CR 1049232...

CVE-2016-6695

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

CVE-2016-3926

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953...

CVE-2016-3927

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244...

Qualcomm Adreno GPU MSM Driver Query Heap Overflow Vulnerability

A heap overflow vulnerability exists in the Qualcomm Adreno GPU MSM Driver, which can be exploited by an attacker to execute arbitrary code in the context of an application, which could also result in a denial of service...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3084-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3084-4 advisory. Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker could use this to corrupt audit logs or disrupt...

USN-3084-4: Linux kernel (Qualcomm Snapdragon) vulnerabilities

Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker could use this to corrupt audit logs or disrupt system-call auditing. CVE-2016-6136 It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel for did...

Google Android Qualcomm power driver elevation of privilege vulnerability

Android on Nexus 5X and 6P is a Linux-based open source operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm power driver is a Qualcomm power connectivity driver component. Qualcomm power driver is a Qualcomm power connection driver...

Google Android Qualcomm Driver Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A buffer overflow vulnerability exists in the drivers/soc/qcom/subsystemrestart.c file in the...

Google Android Qualcomm IPA Driver Elevation of Privilege Vulnerability

Android on Nexus 5X and 6P is a Linux-based open source operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handset Alliance OHA, with the Qualcomm IPA driver as one of the network gas pedal components. An elevation of privilege vulnerability exists in the Qualco...

Google Android Qualcomm Camera Driver Elevation of Privilege Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. The Qualcomm Camera Driver is a Qualcomm-developed camera driver that is used in the Nexus 5X. Qualcomm Camera Driver is a camera driver developed...

Android Qualcomm SPMI Driver Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in Qualcomm SPMI on Nexus 5, 5X, 6, 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker to construct an application that can cause...

Google Android Qualcomm Sound Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. An elevation of privilege vulnerability exists in the Qualcomm Sound Driver in versions of Android prior to...

Google Android Qualcomm Wireless Interface Layer Elevation of Privilege Vulnerability

Android on Nexus 5, 5X, 6, 6P, and Android One is a Linux-based open source operating system for the Nexus 5, 5X, 6, 6P, and Android One smartphones developed by Google and the Open Handset Alliance OHA. The Qualcomm radio interface layer is one of the radio interface layers RIL between the Andro...

Android Qualcomm DMA Component Information Disclosure Vulnerability (CNVD-2016-07470)

Android is a cell phone operating system based on the Linux open kernel. On Nexus 6 devices, an information disclosure vulnerability exists in the Qualcomm DMA component in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker with a constructed application to cause...