EUVD-2016-3165

Malware in sbrugna...

CVE-2016-2060

server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a...

CVE-2016-2060

CVE-2016-2060 is a local privilege escalation in Qualcomm/netd tethering controls caused by inadequate validation of the upstream interface parameter. FireEye’s analysis and Qualcomm advisories describe that untrusted interface values can be passed through addUpstreamV6Interface to netd, which ul...

PT-2016-2015

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a lack of proper validation of upstream interface names in the tethering controller, which can be exploited by attackers to bypass intended access restrictions. This c...

Android Qualcomm Tethering Controller Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Android's Qualcomm Tethering Controller, which can be exploited by a local attacker with the help of a malicious application to...