CVE-2016-2060

server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a...

CVE-2016-2060

CVE-2016-2060 is a local privilege escalation in Qualcomm/netd tethering controls caused by inadequate validation of the upstream interface parameter. FireEye’s analysis and Qualcomm advisories describe that untrusted interface values can be passed through addUpstreamV6Interface to netd, which ul...

CVE-2016-2443

The CVE-2016-2443 entry concerns the Qualcomm MDP driver on Android (pre May 1, 2016) affecting Nexus 5 and Nexus 7 (2013). The root cause is a privilege-escalation flaw that lets a locally executed crafted application gain kernel-level privileges. The Android security bulletin lists this issue u...

CVE-2016-2442

The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26494907...

CVE-2016-2441

The Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 26354602...

CVE-2016-2442

Technical details for CVE-2016-2442 are not publicly provided in the supplied documents; monitor for updates.

Critical Qualcomm flaw puts millions of Android devices at risk

Google has patched a high-severity vulnerability that has been around for the last five years, potentially leaving users' text messages, call histories, and other sensitive data open to snooping. The vulnerability, CVE-2016-2060, affects Android versions 4.3 and earlier that use the software...

USN-2965-4: Linux kernel (Qualcomm Snapdragon) vulnerability

Jann Horn discovered that the extended Berkeley Packet Filter eBPF implementation in the Linux kernel did not properly reference count file descriptors, leading to a use-after-free. A local unprivileged attacker could use this to gain administrative privileges. Ralf Spenneberg discovered that the...

Qualcomm MSM debugfs kernel of any address written to the vulnerability analysis CVE-2 0 1 6-2 4 4 3-the vulnerability warning-the black bar safety net

Recently, Google posted 5 month patch update, this total fix 3 2 vulnerability. Which contains a Qualcomm vulnerability, the threat level of the high-risk, the CVE number for CVE-2 0 1 6-2 4 4 3,CNNVD coding for CNNVD-2 0 1 6 0 5-0 6 to 0. This paper mainly analyzes the vulnerability of the...

Android Qualcomm Buspm Driver Mobilization Vulnerability (CNVD-2016-02838)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.Qualcomm Buspm Driver is one of the Qualcomm Buspm drivers. A boost vulnerability exists in Android's Qualcomm Buspm Driver, which can be exploited by a local attacker to execute arbitrary...

Android Qualcomm Buspm Driver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.Qualcomm Buspm Driver is one of the Qualcomm Buspm drivers. A boost vulnerability exists in Android's Qualcomm Buspm Driver, which can be exploited by a local attacker to execute arbitrary...

Android Qualcomm Tethering Controller Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Android's Qualcomm Tethering Controller, which can be exploited by a local attacker with the help of a malicious application to...

Android Qualcomm TrustZone elevation of privilege vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Android Qualcomm TrustZone allows remote attackers to exploit the vulnerability to build malicious apps with elevated privileges...

Android Qualcomm MDP Driver Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Qualcomm MDP Driver is one of the Qualcomm MDP drivers. A power lifting vulnerability exists in Android's Qualcomm MDP Driver, which can be exploited by a local attacker to execute...

Android Qualcomm Hardware Codec Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Hardware Codec is one of the Qualcomm hardware codecs. A denial of service vulnerability exists in Android's Qualcomm Hardware Codec, which can be exploited by remote...

CVE-2016-2062

The adrenoperfcounterquerygroup function in drivers/gpu/msm/adrenoperfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to...

CVE-2016-2059

The msmipcrouterbindcontrolport function in net/ipcrouter/ipcroutercore.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows...

Race condition

The msmipcrouterbindcontrolport function in net/ipcrouter/ipcroutercore.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows...

CVE-2016-2059

The msmipcrouterbindcontrolport function in net/ipcrouter/ipcroutercore.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows...

CVE-2016-2059

The CVE-2016-2059 issue affects the Linux kernel IPC router module (msm_ipc_router_bind_control_port) in the IPC router core for kernel 3.x used in Qualcomm QuIC Android MSM devices. The vulnerability arises because the function does not verify that a port is a client port, enabling a local attac...