CVE-2016-6691

CVE-2016-6691 affects the Qualcomm Wi-Fi gbk2utf module in Android. The vulnerability allows remote attackers to cause a denial of service (framework crash) or potentially other unspecified impact by connecting to an AP presenting a malformed GBK-encoded SSID, due to improper handling in service/...

CVE-2016-6681

CVE-2016-6681 describes an information disclosure vulnerability in the Qualcomm QDSP6v2 driver (drivers/misc/qcom/qdsp6v2/audio_utils.c) on Android devices prior to 2016-10-05, affecting Nexus 5X, Nexus 6P, and Android One. The issue stems from not initializing certain data structures, allowing a...

CVE-2016-6679

CVE-2016-6679 affects Qualcomm Wi‑Fi driver in Android on Nexus 5X and Android One devices, targeting CORE/HDD/src/wlan_hdd_hostapd.c. A crafted app calling setwpaie ioctl can disclose sensitive information. Affected OS versions are Android before 2016-10-05. The vulnerability is documented in th...

CVE-2016-6693

CVE-2016-6693 describes a vulnerability in the Qualcomm QDSP6v2 driver (msm-ds2-dap-config.c) used on Android. An invalid data length in this driver could allow a remote attacker to trigger a denial of service or cause unspecified impact. The issue affects Android builds prior to 2016-10-05. Publ...

CVE-2016-3903

CVE-2016-3903 is a vulnerability in the Qualcomm camera driver (drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c) affecting Android on Nexus 5, 5X, 6, 6P and Android One, prior to the Oct 5, 2016 patch. The connected CNVD entry notes an integer overflow in the Qualcomm camera driver, w...

CVE-2015-8951

Technical details are not publicly available in the provided connected documents. The CVE entry mentions use-after-free in the Qualcomm sound driver affecting Nexus devices, but no concrete vendor/version/fix details are supplied here. Monitor for updates.

CVE-2016-6692

CVE-2016-6692 affects the Qualcomm MDSS driver in Android, specifically the mdss_mdp_pp.c component. The defect allows a denial of service (invalid pointer access) and possibly unspecified other impact via unknown vectors, tied to Qualcomm internal bug CR 1004933. The vulnerability is described f...

CVE-2016-3860

CVE-2016-3860 affects the Qualcomm sound driver in Android, specifically the file sound/soc/msm/qdsp6v2/audio_calibration.c. The vulnerability allows a crafted application to disclose sensitive information due to an information-disclosure flaw in the Qualcomm sound device on Nexus 5X, Nexus 6P, a...

CVE-2016-6692

drivers/video/msm/mdss/mdssmdppp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via unknown vectors, aka Qualcomm internal bug CR 1004933...

CVE-2016-3934

drivers/media/platform/msm/camerav2/sensor/io/msmcameraccii2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka...

CVE-2016-6695

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540...

CVE-2016-6679

CORE/HDD/src/wlanhddhostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive information via a crafted application that makes a setwpaie ioctl call, aka Android internal bug 29915601 and Qualcomm internal bug CR...

CVE-2016-3929

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

CVE-2016-3903

drivers/media/platform/msm/camerav2/sensor/csid/msmcsid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29513227 and Qualcomm...

CVE-2016-3902

CVE-2016-3902 affects Android’s Qualcomm IPA driver, specifically the ipa_qmi_service.c component, on Nexus 5X and 6P. The vulnerability, described as an information disclosure, could allow a crafted application to obtain sensitive information due to issues in the Qualcomm IPA driver prior to the...

CVE-2016-3901

CVE-2016-3901 affects the Qualcomm cryptographic engine driver (drivers/crypto/msm/qcedev.c) in Android. It describes multiple integer overflows that enable a local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is integer overfl...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

CVE-2016-3931

CVE-2016-3931 affects the Qualcomm QSEE Communicator driver (drivers/misc/qseecom.c) in Android. It enables local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P and Android One devices running pre-2016-10-05 builds. The vulnerability stems from the QSEE Communicator...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

CVE-2016-3927

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244...