CVE-2017-0401

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitiv...

CVE-2016-8450

CVE-2016-8450 is an elevation-of-privilege flaw in the Qualcomm sound driver affecting Android kernel space (Kernel-3.10). The NVD entry describes a local attacker compromising a privileged process to gain code execution in the kernel context. The vulnerability is tied to the Qualcomm sound drive...

CVE-2016-8415

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8412

CVE-2016-8412 is an elevation-of-privilege vulnerability in the Qualcomm camera that could allow a local malicious app to execute arbitrary code in the kernel context. The issue affects Android kernel versions 3.10 and 3.18 and is rated High because exploitation requires first compromising a priv...

CVE-2016-8463

A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: Kernel-3.10, Kernel-3.18...

CVE-2016-8434

An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8436

CVE-2016-8436 matches an elevation-of-privilege flaw in the Qualcomm video driver affecting Android kernels (Kernel-3.18). The vulnerability could let a local malicious app execute arbitrary code in the kernel context, potentially causing a permanent device compromise and requiring reflashing to ...

CVE-2016-8434

CVE-2016-8434 is a local elevation-of-privilege vulnerability in the Qualcomm GPU driver that could allow a malicious local app to execute arbitrary code in the kernel context on Android with Kernel-3.10. The impact is a potential local root compromise. The vulnerability is documented in NVD with...

CVE-2016-8423

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8444

An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

CVE-2016-8450

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0401

CVE-2017-0401 is an information-disclosure vulnerability in the Qualcomm audio post-processor path (lvm/wrapper/Bundle/EffectBundle.cpp in libeffects). A locally running malicious application could access data outside its permissions on Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. T...

CVE-2017-0399

CVE-2017-0399 describes an information-disclosure vulnerability in the Qualcomm audio post processor path: libeffects at lvm/wrapper/Bundle/EffectBundle.cpp. It could allow a local malicious Android app to access data outside its permission level. Affected Android versions are 5.0.2, 5.1.1, 6.0, ...

CVE-2017-0399

An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitiv...

CVE-2016-8463

CVE-2016-8463 describes a denial-of-service vulnerability in the Qualcomm FUSE file system used by Android. A remote attacker could trigger a device hang or reboot by delivering a specially crafted file. Affected software includes Android on kernels 3.10 and 3.18. The connected documents do not s...

CVE-2016-8415

CVE-2016-8415 describes an elevation-of-privilege flaw in the Qualcomm Wi‑Fi driver that lets a local malicious app execute code in the kernel context. Affected software is Android with kernel versions 3.10 and 3.18; exploitation requires compromising a privileged process. The issue is categorize...

CVE-2016-8452

CVE-2016-8452 is a vulnerability in the Qualcomm Wi-Fi driver on Android that allows a local, unprivileged process to escalate to kernel code execution. Root cause is elevation of privilege in the Qualcomm Wi‑Fi driver, with impact described as high since the attacker must first compromise a priv...

CVE-2016-8422

CVE-2016-8422 is an elevation-of-privilege issue in the Qualcomm bootloader that could let a local malicious Android app execute code in the kernel context, potentially leading to permanent device compromise. The vulnerability is described as critical and is tied to the bootloader/Qualcomm stack;...

CVE-2016-8422

An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8423

CVE-2016-8423 is an elevation-of-privilege vulnerability in the Qualcomm bootloader that could let a local malicious app execute arbitrary code in the kernel context. Public sources describe Android as the affected product, with explicit remediation tied to the 2017-01-05 patch level for devices ...