CVE-2015-8890

The CVE-2015-8890 issue affects Android on Nexus 5 and Nexus 7 (2013) where platform/msm_shared/partition_parser.c in the Qualcomm component does not validate certain GPT data, allowing a crafted MMC to bypass access restrictions. The root cause is insufficient validation of GPT data in the parti...

CVE-2014-9786

CVE-2014-9786 describes a heap-based buffer overflow in the Qualcomm camera actuator driver (drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c) within Android on Nexus 5 and 7 (2013) devices prior to 2016-07-05. The underlying fault allows a crafted application to escalate privi...

CVE-2013-7457

CVE-2013-7457 pertains to Android with Qualcomm components. Connected sources indicate a privilege-lifting vulnerability in the Qualcomm component in Android versions prior to 2016-07-05, which can be exploited by a crafted application to gain privileges. The initial description notes an unspecif...

CVE-2014-9798

platform/msmshared/devtree.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 devices does not check the relationship between tags addresses and aboot addresses, which allows attackers to cause a denial of service OS outage via a crafted application, aka Android internal bug...

CVE-2016-3797

The CVE-2016-3797 entry describes an elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver on Android devices (Nexus 5X) prior to 2016-07-05. The issue could allow a locally running, crafted application to gain kernel-level privileges. The vulnerability is tied to Qualcomm internal bu...

CVE-2014-9799

CVE-2014-9799 concerns Android on Nexus 5 and 7 (2013) devices before 2016-07-05, where a Qualcomm makefile omits -fno-strict-overflow, potentially enabling local privilege escalation via crafted apps that exploit incorrect compiler optimization of an integer-overflow protection mechanism. The is...

CVE-2014-9777

The CVE-2014-9777 entry concerns a privilege-escalation flaw in the Qualcomm msm video driver. Specifically, vid_dec_set_meta_buffers in drivers/video/msm/vidc/common/dec/vdec.c does not validate the number of buffers on Android devices (Nexus 5 and Nexus 7, 2013). Impact is local privilege escal...

CVE-2015-8891

CVE-2015-8891 affects Android on Nexus 5 and Nexus 7 (2013) via integer overflows in Qualcomm’s app/aboot/aboot.c, allowing a crafted image to bypass access restrictions. Root cause: multiple integer overflow conditions in the aboot bootloader code within Qualcomm components. Impact: local bypass...

CVE-2014-9787

CVE-2014-9787 describes an integer overflow in drivers/misc/qseecom.c of the Qualcomm component used in Android on Nexus 7 (2013) devices. The vulnerability could allow a local attacker to gain privileges via a crafted application, due to the overflow in the Qualcomm qseecom driver. Public detail...

CVE-2014-9795

CVE-2014-9795 affects the Android/Qualcomm stack on Nexus 5: the aboot.c implementation in Qualcomm components fails to properly guard against an integer overflow when processing crafted start/size values, enabling a local attacker to bypass access restrictions. The issue is tied to Android inter...

CVE-2016-3813

The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28172322 and Qualcomm internal bug CR1010222...

CVE-2016-2503

The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28084795 and Qualcomm internal bug CR1006067...

CVE-2014-9793

platform/msmshared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28821253 and Qualcomm internal bug CR580567...

CVE-2015-8892

platform/msmshared/bootverifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998...

CVE-2015-8890

platform/msmshared/partitionparser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate certain GUID Partition Table GPT data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard MMC, aka Android internal...

CVE-2014-9777

The viddecsetmetabuffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bu...

CVE-2014-9781

CVE-2014-9781 is a buffer overflow in drivers/video/fbcmap.c within the Qualcomm components of Android on Nexus 7 (2013) devices, prior to 2016-07-05. The underlying issue is a buffer overflow in the fbcmap driver that could allow a crafted application to escalate privileges. Affected stack: Andr...

CVE-2014-9802

Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28821965 and Qualcomm internal bug CR705108...

CVE-2016-3797

The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28085680 and Qualcomm internal bug CR1001450...

CVE-2014-9800

CVE-2014-9800 is an integer overflow in lib/heap/heap.c within the Qualcomm component of Android on Nexus 5 and Nexus 7 (2013) devices prior to 2016-07-05. The vulnerability could be triggered by a crafted application to gain privileges, as described in multiple sources (Android/Qualcomm internal...