CVE-2016-8430

CVE-2016-8430 affects the NVIDIA Tegra kernel driver (NVHOST) on Android, where a mismanaged memory reference (user-after-free) can let a local attacker cause a denial of service or escalate to kernel code execution. The issue is described as elevation of privilege with potential for local persis...

CVE-2016-8479

CVE-2016-8479 describes an elevation-of-privilege in the Qualcomm GPU driver for Android. The vulnerability could let a local malicious app execute arbitrary code in the kernel context, potentially leading to a permanent device compromise that may require OS reflashing. Affected: Android on kerne...

CVE-2017-0436

Summary of CVE-2017-0436 (Qualcomm sound driver privilege escalation) : The vulnerability affects Android, specifically the Qualcomm sound driver within kernel contexts (kernel versions 3.10 and 3.18). It enables a local, malicious application to elevate privileges and execute arbitrary code in t...

CVE-2017-0443

CVE-2017-0443 describes an elevation of privilege in the Qualcomm Wi‑Fi driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context. The vulnerability requires compromising a privileged process to gain initial access, and affects Android devices using...

CVE-2017-0448

CVE-2017-0448 is an information-disclosure vulnerability in the NVIDIA Tegra NVHOST kernel driver. The root cause is a memory handling flaw (use-after-free/memory after free) that can allow a local attacker to access data outside the process permissions. Affected stack: Android devices using Kern...

CVE-2017-0613

CVE-2017-0613 is a local elevation-of-privilege flaw in the Qualcomm Secure Execution Environment Communicator driver affecting Android, enabling a non-privileged, user-space process to gain arbitrary code execution in the kernel if a privileged process is first compromised. Affected kernel versi...

CVE-2017-13686

The CVE-2017-13686 entry concerns Linux kernel versions 4.13-rc1 through 4.13-rc6, where net/ipv4/route.c does not correctly check the fi field when RTM_F_FIB_MATCH is set. This can allow a local attacker to trigger a NULL pointer dereference (denial of service) or potentially other unspecified i...

CVE-2016-5870

CVE-2016-5870 concerns the msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c within the ipc_router component of the Linux kernel (3.x), as used in Qualcomm QuIC Android contributions for MSM devices. The vulnerability allows a denial of service via a NULL pointer dereference or ...

CVE-2016-6775

Summary: CVE-2016-6775 is a vulnerability in the NVIDIA Tegra kernel driver (NVMAP) where referencing memory after it has been freed may lead to a denial of service or a local privilege escalation. The issue arises from a use-after-free condition in the NVMAP memory handling, enabling a local att...

CVE-2016-8429

CVE-2016-8429 concerns the NVIDIA Tegra kernel driver (NVMAP) in Android. The connected NVIDIA bulletins describe a memory safety issue in NVMAP where memory references after free can lead to denial of service and possible privilege escalation, enabling a local attacker to execute code in the ker...

CVE-2017-0329

CVE-2017-0329 is an elevation-of-privilege in the NVIDIA boot and power management processor driver on Android (Kernel 3.18). It could allow a local malicious application to execute arbitrary code within the boot/power management context after compromising a privileged process. The entry is backe...

CVE-2017-0449

CVE-2017-0449 describes an elevation-of-privilege in the Broadcom Wi‑Fi driver for Android devices using the 3.10 kernel (e.g., Nexus 6P/Nexus 6). A local, privileged process could be exploited by a malicious user/application to execute arbitrary code in the kernel context. The CNVD entry corrobo...

CVE-2017-0451

CVE-2017-0451 describes an information-disclosure vulnerability in the Qualcomm sound driver on Android. The issue enables a local malicious application to access data outside its granted permissions after compromising a privileged process. Affected components include Android kernels around 3.10 ...

CVE-2017-0457

The CVE-2017-0457 entry describes an elevation of privilege in the Qualcomm ADSPRPC driver on Android, allowing a local malicious app to execute arbitrary code in the kernel context. Affected components/versions include Android kernel 3.10 and 3.18 with the ADSPRPC driver as the exploit vector; t...

CVE-2017-0461

CVE-2017-0461 is an information-disclosure vulnerability in the Qualcomm Wi‑Fi driver affecting Android (kernel 3.10/3.18). The issue could allow a locally malicious app to access data outside its permissions, because exploitation requires compromising a privileged process. The connected document...

CVE-2017-0518

Summary: CVE-2017-0518 is an elevation of privilege in the Qualcomm fingerprint sensor driver on Android, enabling a local attacker to execute arbitrary code in kernel context. The affected component is the Qualcomm fingerprint sensor driver (kernel version 3.18 on Android). The issue requires co...

CVE-2017-0570

CVE-2017-0570 concerns a local elevation-of-privilege flaw in the Broadcom Wi‑Fi driver used by Android. The connected Seebug entry details a heap overflow in the wl_iw_get_essid ioctl path (SIOCGIWESSID): the driver allocates a 33-byte extras buffer and copies ssid.SSID_len bytes from the dongle...

CVE-2017-0575

An elevation of privilege vulnerability exists in the Qualcomm Wi‑Fi driver on Android. CVE-2017-0575 can allow a local attacker to execute arbitrary code in the kernel context after compromising a privileged process. Affected products/versions include Android with the kernel versions 3.10 and 3....

CVE-2017-0582

CVE-2017-0582 is a moderate-e severity elevation-of-privilege issue affecting the Google Nexus 9 sensor hub. The vulnerability stems from the HTC OEM fastboot command which could allow a local attacker to execute code in the sensor hub context. Technical details from connected sources describe a ...

CVE-2017-8061

The CVE-2017-8061 issue affects Linux kernels 4.9.x and 4.10.x prior to 4.10.7, where dvb-usb-firmware.c mishandles CONFIG_VMAP_STACK, allowing local users to trigger a denial of service or memory corruption by using more than one virtual page for a DMA scatterlist. Root cause: incorrect interact...

CVE-2016-6777

CVE-2016-6777 affects NVIDIA Tegra kernel driver (NVMAP) with a use-after-free vulnerability: referencing memory after it has been freed can lead to denial of service or possible privilege escalation. Base details in NVIDIA/Tegra entries show a CVSSv3.0 base score of 8.4 and a local/privilege-esc...

CVE-2016-8409

CVE-2016-8409 is an information-disclosure vulnerability in the NVIDIA video driver on Android (Kernel-3.10). It could allow a local malicious app with access to a privileged process to read data outside its permission levels on affected devices (e.g., Nexus 9). The issue is labeled Moderate in s...

CVE-2016-8412

CVE-2016-8412 is an elevation-of-privilege vulnerability in the Qualcomm camera that could allow a local malicious app to execute arbitrary code in the kernel context. The issue affects Android kernel versions 3.10 and 3.18 and is rated High because exploitation requires first compromising a priv...

CVE-2017-0462

CVE-2017-0462 describes an elevation-of-privilege vulnerability in the Qualcomm Seemp driver that could allow a local malicious Android application to execute arbitrary code in the kernel context. Affected product is Android with Kernel-3.18; Android ID A-33353601. The base impact is high, requir...

CVE-2017-0464

CVE-2017-0464 is a local elevation-of-privilege vulnerability in the Qualcomm Wi‑Fi driver used by Android. The flaw allows a locally malicious application to execute arbitrary code in the kernel context after compromising a privileged process. Public documentation identifies the affected stack a...

CVE-2017-0465

CVE-2017-0465 describes an elevation of privilege vulnerability in the Qualcomm ADSPRPC driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices. Affected components/versions in the public records include the Android kernel (Kernel-3.10, Kernel-3...

CVE-2010-5329

The CVE-2010-5329 issue affects Linux kernels (video_usercopy in drivers/media/video/v4l2-ioctl.c) before 2.6.39. The flaw is that it relies on the count value of a v4l2_ext_controls data structure to determine a kmalloc size, which could allow local users to trigger memory exhaustion (DoS). The ...

CVE-2016-6759

CVE-2016-6759 is an elevation of privilege vulnerability in Qualcomm Media Codecs on Android. It could allow a local malicious app to execute arbitrary code within the context of a privileged process. Affected components/conditions: Android devices using Kernel-3.10 or Kernel-3.18 with Qualcomm M...

CVE-2016-8477

CVE-2016-8477 targets the Qualcomm camera driver in Android and is an information disclosure vulnerability. A local malicious application could access data outside its permission level after compromising a privileged process, making this a local, privilege-requiring issue. Affected: Android on Ke...

CVE-2017-0307

Summary (CVE-2017-0307) : A vulnerability in the NVIDIA Tegra kernel DRM driver can trigger an integer overflow while calculating memory to allocate, causing a smaller-than-needed allocation and a potential buffer overflow. This may lead to denial of service or possible privilege escalation withi...

CVE-2017-0339

CVE-2017-0339 is an NVIDIA Tegra crypto-dev driver IOCTL handling vulnerability. The issue arises when a value is passed to the kernel driver without proper validation, potentially causing array index issues. Affected are NVIDIA Tegra-based platforms running Linux for Tegra in Android, notably Je...

CVE-2017-0463

CVE-2017-0463 is an elevation-of-privilege in the Qualcomm networking driver affecting Android kernels (Kernel-3.10 and Kernel-3.18). The issue could let a local malicious app run code in kernel context after compromising a privileged process. The available connected sources confirm the vulnerabi...

CVE-2017-0534

CVE-2017-0534 describes an information disclosure in the Qualcomm video driver for Android, enabling a local malicious application to access data outside its permission levels. Connected CNVD/NVD entries reiterate the issue and affected component (Qualcomm video driver) but do not provide explici...

CVE-2016-10154

CVE-2016-10154 affects Linux kernel 4.9.x prior to 4.9.1. The smbhash function in fs/cifs/smbencrypt.c interacts incorrectly with CONFIG_VMAP_STACK, enabling local users to trigger a denial of service (system crash or memory corruption) or other unspecified impacts by exploiting use of more than ...

CVE-2016-8400

CVE-2016-8400 describes an information-disclosure vulnerability in the NVIDIA librm library (libnvrm) on Android (Kernel 3.18). A local malicious application could read data outside its permission levels due to improper memory handling in LIBNVRM, potentially exposing sensitive data. The vulnerab...

CVE-2017-0452

CVE-2017-0452 describes an information-disclosure vulnerability in the Qualcomm camera driver on Android (kernel 3.10). The issue could allow a local malicious application to access data outside its permission levels after compromising a privileged process. Affected devices include Nexus 5X, Nexu...

CVE-2017-0521

CVE-2017-0521 is a local elevation-of-privilege issue in the Qualcomm camera driver that could allow a malicious local app to execute arbitrary code in the kernel. The vulnerability targets Android and is tied to kernel versions 3.10 and 3.18, with referenced impact described as high for a compro...

CVE-2017-0564

CVE-2017-0564 relates to an Elevation of Privilege in the Android kernel ION subsystem. The issue could allow a local malicious app to execute code with kernel privileges (local EoP). Affected are Android kernels 3.10 and 3.18. Public documents identify the kernel ION subsystem as the vulnerable ...

CVE-2017-0581

CVE-2017-0581 is an elevation-of-privilege flaw in the Synaptics Touchscreen driver for Android. The issue could let a local malicious app execute arbitrary code in the kernel context after compromising a privileged process. The vulnerability affects the Android stack (kernel-3.18) and is describ...

CVE-2010-5328

The CVE affects the Linux kernel, specifically signals targeting a process group ID of zero reaching the swapper due to a flaw in include/linux/init_task.h prior to 2.6.35. This allows a local user to trigger a denial of service (system crash). The vulnerability is caused by insufficient filterin...

CVE-2016-6780

CVE-2016-6780 is described as an elevation-of-privilege in the HTC sound codec driver that could allow a local malicious application to execute arbitrary code in the kernel context on Android (kernel-3.10). Affected product/any specifics beyond Android and Nexus 9 are not provided in the Initial ...

CVE-2016-8465

CVE-2016-8465 is an elevation-of-privilege vulnerability in the Broadcom Wi‑Fi driver that could let a local malicious app execute code in the kernel. Documents confirm the issue affects Android devices (kernel 3.10/3.18) and that exploitation requires a privileged process, with current mitigatio...

CVE-2016-8466

CVE-2016-8466 is an elevation of privilege vulnerability in the Broadcom Wi‑Fi driver affecting Android with kernel components (Kernel-3.10, Kernel-3.18). The issue allows a local malicious application to execute arbitrary code in the kernel context after compromising a privileged process. The en...

CVE-2016-8475

CVE-2016-8475 describes an information-disclosure vulnerability in the HTC input driver on Android platforms running kernel 3.18. A local malicious application could access data outside its normal permission set after compromising a privileged process. The issue is documented as affecting Android...

CVE-2017-0330

CVE-2017-0330 affects NVIDIA’s Tegra kernel via the NVIDIA crypto driver. The connected NVIDIA security bulletin details that the vulnerability arises from a user-supplied pointer not being correctly validated in the crypto driver, potentially enabling denial of service or privilege escalation. A...

CVE-2017-0434

CVE-2017-0434 affects the Synaptics touchscreen driver in the Android kernel (Kernel-3.18). It is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset after compromising a privileged process....

CVE-2017-0435

CVE-2017-0435 is an elevation-of-privilege in the Qualcomm sound driver affecting Android kernels (Kernel-3.10 and Kernel-3.18). The vulnerability could let a local malicious app execute arbitrary code in the kernel context after compromising a privileged process. The CVE is documented with Qualc...

CVE-2017-0454

CVE-2017-0454 is an elevation-of-privilege vulnerability in the Qualcomm audio driver that allows a local malicious application to execute arbitrary code in the kernel context. Affected product: Android with kernel versions 3.10 and 3.18. Root cause is exploitation within the Qualcomm audio drive...

CVE-2017-0516

CVE-2017-0516 is described as an elevation of privilege in the Qualcomm input hardware driver that could enable a local malicious app to execute code in the kernel context on Android devices. Public sources consistently list affected products as Android with kernel versions 3.10 and 3.18; Android...

CVE-2017-0519

CVE-2017-0519 describes an elevation-of-privilege vulnerability in the Qualcomm fingerprint sensor driver for Android (kernel 3.18). A local attacker could exploit this to execute arbitrary code in the kernel context by compromising a privileged process. The entry remains focused on Android and k...