CVE-2016-3868

The Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28967028 and Qualcomm internal bug CR1032875...

CVE-2016-3858

Buffer overflow in drivers/soc/qcom/subsystemrestart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug...

CVE-2016-3892

The Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28760543 and Qualcomm internal bug CR1024197...

CVE-2016-3866

The Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28868303 and Qualcomm internal bug CR1032820...

CVE-2016-3874

CORE/HDD/src/wlanhddwext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array, which allows attackers to gain privileges via a crafted application that sends a WEUNITTESTCMD command, aka Android internal bug 29944562 and...

CVE-2016-3866

CVE-2016-3866 identifies an elevation-of-privilege vulnerability in the Qualcomm sound driver in Android prior to 2016-09-05 on Nexus 5X, 6 and 6P. A crafted application could gain privileges in the context of the kernel via the affected sound-driver path. The issue is listed among multiple Qualc...

CVE-2016-3893

The wcdcalhwdepioctlshared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2016-3867

The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897...

Patched Android Libutils Vulnerability Harkens Back to Stagefright

This week’s Android Security Bulletin patched a calamity of vulnerabilities that threatened almost every device in circulation and illustrated the fragility of the Android ecosystem. The bulletin addressed more than 50 vulnerabilities, including nine rated critical by Google because of the...

Google Shares Android Nougat, Safe Browsing Security Enhancements

Google this week shared with developers security enhancements it has added to the new Nougat version of Android and additional security features for webmasters via Safe Browsing to help pinpoint harmful content on websites. Under the banner of its nine-year-long Safe Browsing initiative, Google...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the app/aboot/aboot.c file of the Qualcomm Android operating system is due to a numerical overflow. Exploiting this vulnerability allows a local attacker to increase their privileges using a specially crafted boot image...

Google Patches Quadrooter Vulnerabilities in Android

The Quadrooter vulnerabilities made a lot of people take notice because the scale of affected Android devices more than 900,000 put it on a level with Stagefright and other bugs that impact a large majority of the Android ecosystem. Some details on the four vulnerabilities were publicly disclosed...

Qualcomm Innovation Center Android contributions for MSM buffer overflow vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a program for MSM to support users in building Qualcomm chip products based on the Android platform and including other enhancements.Qualcomm Innovation Center QuIC Android patch is an Android patch package from QuIC. QuIC Android...

Qualcomm Innovation Center Android contributions for MSM integer overflow vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a program for MSM to support users in building Qualcomm chip products based on the Android platform and including other enhancements.Qualcomm Innovation Center QuIC Android patch is an Android patch package from QuIC. An integer...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the drivers/video/msm/mdss/mdssmdppp.c file of Qualcomm’s Android operating system is related to an incorrect determination of the data size of the Gamut LUT. Exploiting this vulnerability can allow a remote attacker to obtain confidential information through a specially...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c component of Qualcomm’s Android operating system is related to the lack of checks on frame messages in CPP. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially create...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/media/radio/radio-iris.c component of Qualcomm’s Android operating system arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of Qualcomm’s Android operating system stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application, which is related to the files arch/arm/mach-msm/qdsp6v2/audioutils.c and...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the drivers/media/radio/radio-iris.c component of Qualcomm’s Android operating system is related to the use of an incorrect integer data type. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause a service failure buffer overflow...