CVE-2017-0624

CVE-2017-0624 describes an information-disclosure vulnerability in the Qualcomm Wi‑Fi driver on Android, enabling a local malicious app to access data outside its permissions. Affected: Android devices (notably Nexus 5X, Pixel, Pixel XL) with Kernel 3.10/3.18; root cause: Qualcomm Wi‑Fi driver in...

CVE-2017-0650

CVE-2017-0650 affects the Synaptics touchscreen driver on Android. It enables a local malicious app to disclose data outside its permission levels after compromising a privileged process. Huawei’s advisory reiterates information disclosure via the Synaptics driver, with fixes released for Android...

CVE-2016-10291

CVE-2016-10291 involves an elevation of privilege in the Qualcomm Slimbus driver affecting Android kernels (Kernel-3.10). The issue allows a local malicious app to execute arbitrary code in the kernel context via this driver. Public exploitation details are not provided in the supplied documents....

CVE-2016-8414

CVE-2016-8414 is an information-disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator affecting Android. It permits a local attacker with a compromised privileged process to access data outside its permissions. Affected components are the Android kernel (Kernel-3.10 a...

CVE-2016-8435

CVE-2016-8435 is an elevation of privilege in the NVIDIA GPU driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices (Kernel-3.18). The issue is addressed in Android security updates released around the 2017-01-01/2017-01-05 patch levels; Pixel ...

CVE-2016-8444

CVE-2016-8444 is an elevation of privilege vulnerability in the Qualcomm camera that could allow a local malicious app to execute arbitrary code in the kernel context on Android (Kernel-3.10). The flaw requires compromising a privileged process, and the description identifies Android as the produ...

CVE-2016-8452

CVE-2016-8452 is a vulnerability in the Qualcomm Wi-Fi driver on Android that allows a local, unprivileged process to escalate to kernel code execution. Root cause is elevation of privilege in the Qualcomm Wi‑Fi driver, with impact described as high since the attacker must first compromise a priv...

CVE-2017-0520

CVE-2017-0520 is an elevation-of-privilege vulnerability in the Qualcomm crypto engine driver that could allow a local malicious Android app to execute code in the kernel context. Affected components: Qualcomm crypto engine driver; vulnerable against Android kernels 3.10 and 3.18. Trigger require...

CVE-2017-0609

CVE-2017-0609 is an elevation-of-privilege vulnerability in the Qualcomm sound driver on Android, enabling a local malicious app to execute code in the kernel context. Affected: Android devices with Kernel-3.10/3.18 (Qualcomm sound subsystem). Root cause: not explicitly detailed in the provided d...

CVE-2017-0628

CVE-2017-0628 is an information-disclosure vulnerability in the Qualcomm camera driver. The issue could allow a local malicious application to access data outside its permissions, requiring compromise of a privileged process. Affected: Android devices using Kernel-3.10 or Kernel-3.18 with Qualcom...

CVE-2017-0632

CVE-2017-0632 is an information-disclosure vulnerability in the Qualcomm sound codec driver within Android’s kernel (Kernel-3.10). It could allow a local malicious application to access data beyond its permissions after compromising a privileged process. The issue is classified as Moderate and is...

CVE-2016-8393

CVE-2016-8393 describes an elevation of privilege in the Synaptics touchscreen driver that could let a local malicious Android application execute arbitrary code in kernel context. Affected product: Android (kernel 3.10). Root cause: a vulnerability in the Synaptics touchscreen driver enabling co...

CVE-2016-8441

CVE-2016-8441 : Possible buffer overflow in the Android hypervisor due to inappropriate use of a static array in Kernel 3.18. Impact: local code execution with high severity (CVSS2 7.2, CVSS3 7.8). Connected documents confirm product/versions but do not provide a concrete patch/remediation detail...

CVE-2016-8449

CVE-2016-8449 is an elevation-of-privilege vulnerability in the NVIDIA Tegra GPU/NVMAP kernel driver. The issue arises from referencing memory after it has been freed in NVMAP, which can allow a local attacker to escalate privileges and potentially execute code in kernel context. Affected platfor...

CVE-2016-8478

CVE-2016-8478 describes an information-disclosure vulnerability in the Qualcomm video driver on Android (Kernel 3.18). The issue allows a local malicious application to access data outside its permission levels, but only after compromising a privileged process. The root cause is information expos...

CVE-2017-0621

CVE-2017-0621 is an elevation-of-privilege flaw in the Qualcomm camera driver for Android. The vulnerability lets a local, malicious app run code in the kernel context by exploiting the Qualcomm camera driver after compromising a privileged process. The issue affects Android devices with the affe...

CVE-2017-8072

The vulnerability CVE-2017-8072 affects the Linux kernel 4.9.x with a flaw in cp2112_gpio_direction_input (drivers/hid/hid-cp2112.c): it does not return the expected EIO error for a zero-length report, enabling local users to cause an unspecified impact via unknown vectors. Affected: Linux kernel...

CVE-2016-10286

CVE-2016-10286 is an elevation-of-privilege vulnerability in the Qualcomm video driver on Android, enabling a local malicious application to execute arbitrary code in the kernel context. The issue affects Android with Kernel-3.18 and Android ID A-35400904; exploitation requires compromising a pri...

CVE-2016-6779

CVE-2016-6779 is a local elevation-of-privilege in the HTC sound codec driver affecting Android kernel 3.10 (Nexus 9). The vulnerability could let a local malicious application execute arbitrary code in the kernel context if it can compromise a privileged process. The issue is categorized as High...

CVE-2016-8426

CVE-2016-8426 affects the NVIDIA GPU driver on Android (kernel-3.10). It is an elevation-of-privilege vulnerability that could let a local malicious app execute arbitrary code in kernel context, potentially causing a local permanent device compromise. The NVD entry cites CVSSv3: LOCAL access, hig...

CVE-2016-8437

CVE-2016-8437 describes an improper input validation in Android’s Access Control APIs, with the kernel 3.18 memory range check potentially mishandled. Affected product: Android (Kernel 3.18). Official description notes a memory-range check issue but does not provide exploit paths or a concrete fi...

CVE-2016-8439

CVE-2016-8439 is an Android vulnerability describing a possible buffer overflow in the trust zone access control API due to insufficient buffer size checking. The connected NVD entry lists affected software as Android kernel 3.18, with Android ID A-31625204, indicating the root cause lies in a bu...

CVE-2016-8483

CVE-2016-8483 describes an information-disclosure vulnerability in the Qualcomm power driver used by Android on Kernel-3.10. A locally installed, malicious app could access data outside its permission levels due to a flaw in the Qualcomm power driver component. The issue is categorized as High ri...

CVE-2017-0631

CVE-2017-0631 is an information-disclosure vulnerability in the Qualcomm camera driver for Android. According to NVD, it affects Android on kernels 3.10 and 3.18, enabling a local malicious application to access data outside its permission levels after compromising a privileged process. The descr...

CVE-2016-10284

CVE-2016-10284 is a vulnerability in the Qualcomm video driver that enables an elevated-privilege path: a local, privileged process could be exploited by a malicious local app to run arbitrary code in the kernel context on Android devices. The issue affects Android kernel versions 3.10 and 3.18, ...

CVE-2016-10290

CVE-2016-10290 is an elevation-of-privilege issue in the Qualcomm Shared Memory Driver used on Android. The vulnerability could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the shared memory driver. The entry specifies that exploitation is loca...

CVE-2016-10294

CVE-2016-10294 describes a local information-disclosure vulnerability in the Qualcomm power driver used in Android. The issue could allow a local malicious application to access data outside its permission levels by exploiting the Qualcomm power driver in affected Android kernels (Kernel-3.10 and...

CVE-2016-8392

CVE-2016-8392 is a local privilege-escalation in the Qualcomm sound driver affecting Android devices (Nexus 5X/6/6P, Android One, Pixel/Pixel XL) via the kernel context. The vulnerability could let a malicious local app execute arbitrary code in the kernel after compromising a privileged process....

CVE-2016-8407

CVE-2016-8407 is an information disclosure vulnerability in Android’s kernel components (ION subsystem, Binder, USB driver, and networking). The issue could allow a local malicious app to access data outside its permission levels after compromising a privileged process. Affected products/versions...

CVE-2016-8416

The CVE-2016-8416 entry concerns an information-disclosure vulnerability in the Qualcomm video driver on Android (kernel 3.18). A local malicious application could access data outside its permissions due to the driver’s handling, with impact described as data disclosure and requiring a privileged...

CVE-2016-10285

CVE-2016-10285 concerns an elevation-of-privilege in the Qualcomm video driver within Android's kernel (Kernel-3.18). A local malicious application could execute arbitrary code in kernel context if it first compromises a privileged process. The issue is rated High and requires local access with u...

CVE-2016-10296

CVE-2016-10296 is an information-disclosure vulnerability in the Qualcomm shared memory driver affecting Android kernels those listed (Kernel-3.10, Kernel-3.18). The issue could allow a local malicious application to access data beyond its permissions, and is categorized as Moderate because explo...

CVE-2016-8394

CVE-2016-8394 describes an elevation-of-privilege vulnerability in the Synaptics touchscreen driver on Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context by exploiting the Synaptics driver, requiring initial compromise of a privileged proc...

CVE-2016-8473

CVE-2016-8473 is an information-disclosure vulnerability in the STMicroelectronics driver on Android (Kernel-3.10). A local, malicious app could access data outside its permissions after compromising a privileged process. Affected devices listed for this CVE include Nexus 5X and Nexus 6P. The pat...

CVE-2017-0536

CVE-2017-0536 concerns an information-disclosure flaw in the Synaptics touchscreen driver on Android, affecting Kernel-3.10 and Kernel-3.18. The vulnerability could let a local malicious process access data outside its privileges, requiring compromise of a privileged process. Publicly disclosed d...

CVE-2017-0580

CVE-2017-0580 is an elevation-of-privilege flaw in the Synaptics Touchscreen driver within Android’s kernel (3.18). A local malicious process could exploit the driver to run arbitrary code in kernel context. The issue is described as High severity, contingent on compromising a privileged process ...

CVE-2017-0629

CVE-2017-0629 is an information-disclosure vulnerability in the Qualcomm camera driver for Android, enabling a local malicious app to access data outside its permissions after compromising a privileged process. Affected: Android kernels 3.10/3.18 (Qualcomm camera driver). Base impact: partial con...

CVE-2016-6782

CVE-2016-6782 describes a local elevation-of-privilege in the MediaTek driver on Android (Kernel-3.10) that could allow a malicious local app to execute arbitrary code in kernel context. The issue requires compromising a privileged process first; no public exploit details or patches are provided ...

CVE-2016-6790

CVE-2016-6790 affects NVIDIA libomx (libnvomx) in Android devices (notably Pixel C) with kernel 3.18. Root cause: NVIDIA OpenMAX component copies an input buffer to an output buffer without validating the input size, enabling local exploitation; the NVIDIA bulletin labels this as a high‑severity ...

CVE-2016-8404

CVE-2016-8404 is an information-disclosure vulnerability in Android kernel components (ION subsystem, Binder, USB driver, and networking). A local malicious application could access data outside its permission levels after compromising a privileged process. Affected product/versions: Android kern...

CVE-2016-6757

CVE-2016-6757 describes an information-disclosure vulnerability affecting Qualcomm components used in Android devices, specifically the camera driver and video driver. The issue could allow a local malicious application to access data beyond its permissions after compromising a privileged process...

CVE-2016-6781

CVE-2016-6781 describes an Elevation of Privilege in the MediaTek driver affecting Android on kernel 3.10. The vulnerability could allow a local malicious application to execute arbitrary code in the kernel context after compromising a privileged process. The NVD entry lists the impact as High wi...

CVE-2016-6791

CVE-2016-6791 is an elevation-of-privilege vulnerability in the Qualcomm sound driver affecting Android devices. The issue allows a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. Affected components/versions inclu...

CVE-2016-8403

CVE-2016-8403 describes an information-disclosure vulnerability in Android’s kernel components, including the ION subsystem, Binder, USB driver, and networking subsystem. The issue could allow a local malicious application to access data outside its permission levels, with confidentiality impact ...

CVE-2016-8410

CVE-2016-8410 is an information-disclosure vulnerability in the Qualcomm sound driver affecting Android devices. The issue could allow a local malicious application to access data outside its permission levels, and is rated Moderate because exploitation requires first compromising a privileged pr...

CVE-2016-8415

CVE-2016-8415 describes an elevation-of-privilege flaw in the Qualcomm Wi‑Fi driver that lets a local malicious app execute code in the kernel context. Affected software is Android with kernel versions 3.10 and 3.18; exploitation requires compromising a privileged process. The issue is categorize...

CVE-2016-8450

CVE-2016-8450 is an elevation-of-privilege flaw in the Qualcomm sound driver affecting Android kernel space (Kernel-3.10). The NVD entry describes a local attacker compromising a privileged process to gain code execution in the kernel context. The vulnerability is tied to the Qualcomm sound drive...

CVE-2016-6778

CVE-2016-6778 is an Elevation of Privilege affecting the Android kernel path via the HTC sound codec driver. The vulnerability could let a local malicious application execute arbitrary kernel code, requiring initial compromise of a privileged process before exploitation. Affected stack: Android o...

CVE-2016-10295

An information disclosure vulnerability in the Qualcomm LED driver (CVE-2016-10295) could allow a local malicious Android app to access data outside its permission levels. Affected product: Android; Kernel version: 3.18. Android ID: A-33781694. The issue is rated Moderate because exploitation req...

CVE-2016-6785

CVE-2016-6785 is described across multiple sources as an elevation of privilege vulnerability in the MediaTek driver on Android, enabling a (local) attacker to execute arbitrary code in the context of the kernel. The documented impact is a kernel-level compromise that requires a privileged proces...