Qualcomm components in Android vulnerabilities

In Qualcomm components in Android before 2016-08-05, there is a vulnerability that does not validate a certain count parameter. This allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application.

In Qualcomm components in Android before 2016-08-05, there is a vulnerability in msm_mctl_buf.c that does not validate the image mode. This can lead to denial of service (out-of-bounds array access) or other unspecified impacts via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 devices, there is no verification of mapping existence before proceeding with an unmap operation. This allows attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 6 devices, the stream state is not validated in msm_cpp.c, allowing attackers to gain privileges via a crafted application.

The Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices have an issue with improper validation of array indexes, allowing attackers to gain privileges via a crafted application.

Integer overflow in q6lsm.c in Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices, a bug in socket process handling allows attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 devices, certain buffer addresses are not validated, allowing attackers to gain privileges via a crafted application that makes an ioctl call.

Off-by-one error in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges via a crafted application that sends an I2C command.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 devices, CPP frame messages are not validated, allowing attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, there is a vulnerability that improperly validates input parameters. This allows attackers to gain privileges via a crafted application.

Integer overflow in diag_dci.c in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, VEN_IOCTL_GET_SEQUENCE_HDR ioctl calls are not validated in venc.c. This allows attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 devices, there is a vulnerability that does not reject kernel-space buffer addresses, allowing attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, there is a flaw in handling a user-space pointer, allowing attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices, a vulnerability allows attackers to gain privileges via a crafted application that sends short DCI request packets.

Buffer overflow in Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted application.

An integer underflow in diag_dci.c in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application.

Multiple buffer overflows in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability allows attackers to gain privileges via an application that provides a crafted mask value.

In Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, a vulnerability exists that does not validate the number of streams. This allows attackers to gain privileges via a crafted application.

In Qualcomm components in Android before July 5, 2016, on Nexus 5X and 6P devices, there is a vulnerability that allows attackers to bypass intended access restrictions via a digest with trailing data.

Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices allow attackers to bypass intended access restrictions via a crafted image.

In Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices, certain GUID Partition Table (GPT) data is not validated. This allows attackers to bypass intended access restrictions via a crafted MultiMediaCard (MMC).

The aboot implementation in Qualcomm components in Android before 2016-07-05 on Nexus 6P devices omits the recovery PIN feature, which may lead to unspecified impacts and attack vectors.

Integer overflow in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices allows attackers to bypass intended access restrictions via a crafted block count and block size of a sparse header.

In Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices, the page size in the kernel header is not validated, allowing attackers to bypass intended access restrictions via a crafted boot image.

In Qualcomm components in Android before 2016-07-05 on Nexus 5 devices, there is a flaw in app/aboot/aboot.c that does not properly check for integer overflow, allowing attackers to bypass intended access restrictions via crafted start and size values.

In Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices, pointers used in read and write operations are not validated. This allows attackers to gain privileges via a crafted application.

Multiple buffer overflows in diag_debugfs.c in Qualcomm components in Android before July 5, 2016, on Nexus 5 and 7 (2013) devices allow attackers to gain privileges via a crafted application.

The vid_dec_set_h264_mv_buffers function in Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, allowing attackers to gain privileges via a crafted application.

The vid_dec_set_meta_buffers function in Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, allowing attackers to gain privileges via a crafted application.

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.