Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2017-08-16 CVE-2016-5864 Permissions, Privileges, and Access Controls vulnerability in Google Android
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow.
local
low complexity
google CWE-264
7.8
2017-08-16 CVE-2016-5863 Permissions, Privileges, and Access Controls vulnerability in Google Android
In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.
local
low complexity
google CWE-264
7.8
2017-08-16 CVE-2016-5862 Permissions, Privileges, and Access Controls vulnerability in Google Android
When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.
local
high complexity
google CWE-264
7.0
2017-08-16 CVE-2016-5861 Permissions, Privileges, and Access Controls vulnerability in Google Android
In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow.
low complexity
google CWE-264
8.8
2017-08-16 CVE-2016-5860 Permissions, Privileges, and Access Controls vulnerability in Google Android
In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow.
local
high complexity
google CWE-264
7.0
2017-08-16 CVE-2016-5859 Permissions, Privileges, and Access Controls vulnerability in Google Android
In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow.
local
high complexity
google CWE-264
7.0
2017-08-16 CVE-2016-5858 Information Exposure vulnerability in Google Android
In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs.
local
high complexity
google CWE-200
4.7
2017-08-16 CVE-2016-5855 Information Exposure vulnerability in Google Android
In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking if the source buffer is large enough.
local
high complexity
google CWE-200
4.7
2017-08-16 CVE-2016-5854 Information Exposure vulnerability in Google Android
In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace.
local
high complexity
google CWE-200
4.7
2017-08-16 CVE-2016-5853 Permissions, Privileges, and Access Controls vulnerability in Google Android
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value.
local
high complexity
google CWE-264
7.0