Browse CVEs

HIGH 7.0 CVE-2016-5868 drivers/net/ethernet/msm/rndis_ipa.c in the Qualcomm networking driver in Android allows remote attackers to execute arbitrary code via a crafted app… Android after 8.0 Fix from $1,9502017-09-25 HIGH 8.8 CVE-2016-5861 In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to … Android Patch available Fix from $1,9502017-08-16 HIGH 7.8 CVE-2016-5863 In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can le… Android Patch available Fix from $1,9502017-08-16 HIGH 7.8 CVE-2016-5864 In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, an… Android Patch available Fix from $1,9502017-08-16 HIGH 7.0 CVE-2016-5853 In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not … Android Patch available Fix from $1,9502017-08-16 HIGH 7.0 CVE-2016-5859 In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length… Android Patch available Fix from $1,9502017-08-16 HIGH 7.0 CVE-2016-5860 In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large lengt… Android Patch available Fix from $1,9502017-08-16 HIGH 7.0 CVE-2016-5862 When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type … Android Patch available Fix from $1,9502017-08-16 HIGH 7.0 CVE-2016-5867 In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result i… Android Patch available Fix from $1,9502017-08-16 MEDIUM 6.2 CVE-2016-10398 Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Tr… Android Mitigation only Fix from $1,6002017-07-17 HIGH 7.8 CVE-2016-10341 In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended. Android No fix yet Fix from $1,9502017-06-13 HIGH 7.8 CVE-2016-10238 In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue. Android Patch available Fix from $1,9502017-05-16 HIGH 7.8 CVE-2016-10274 An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code withi… Android after 7.1.2 Fix from $1,9502017-05-12 HIGH 7.8 CVE-2016-10275 An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the co… Android after 7.1.2 Fix from $1,9502017-05-12 HIGH 7.8 CVE-2016-10276 An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the co… Android after 7.1.2 Fix from $1,9502017-05-12 HIGH 7.0 CVE-2016-10280 An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within th… Android after 7.1.2 Fix from $1,9502017-05-12 HIGH 7.0 CVE-2016-10281 An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within th… Android after 7.1.2 Fix from $1,9502017-05-12 HIGH 7.0 CVE-2016-10282 An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within th… Android after 7.1.2 Fix from $1,9502017-05-12 CRITICAL 9.8 CVE-2016-6727 The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. Android after 7.1.1 Fix from $2,3002017-04-17 CRITICAL 9.8 CVE-2014-7920 mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. Android Mitigation only Fix from $2,3002017-04-13 CRITICAL 9.8 CVE-2014-7921 mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. Android Mitigation only Fix from $2,3002017-04-13 HIGH 7.8 CVE-2016-5857 The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted applicati… Android Mitigation only Fix from $1,9502017-03-20 HIGH 7.0 CVE-2014-9909 An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the … Android after 7.1.0 Fix from $1,9502017-01-18 HIGH 7.0 CVE-2014-9910 An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the … Android after 7.1.0 Fix from $1,9502017-01-18 MEDIUM 5.5 CVE-2016-8467 An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue… Android after 7.1.0 Fix from $1,6002017-01-13 HIGH 7.8 CVE-2016-6492 The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application th… Android after 7.1.0 Fix from $1,9502017-01-12 HIGH 7.0 CVE-2016-8445 An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious applica… Android after 7.1.0 Fix from $1,9502017-01-12 HIGH 7.0 CVE-2016-8446 An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious applica… Android after 7.1.0 Fix from $1,9502017-01-12 HIGH 7.0 CVE-2016-8447 An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious applica… Android after 7.1.0 Fix from $1,9502017-01-12 HIGH 7.0 CVE-2016-8448 An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious applica… Android after 7.1.0 Fix from $1,9502017-01-12