Back to all categorys

Elevation of privilege vulnerability in Qualcomm components

CVE-2014-9863

(json)

• CVE numbers: CVE-2014-9863 [Bulletin-CVE-2014-9863]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470. [NIST-CVE-2014-9863]
• Discovered by: on: Unknown
• Reported on: 2016-08-01 [Bulletin-CVE-2014-9863]
• Fixed on: 2013-12-24 [QC-CR#549470]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9863]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9794

(json)

• CVE numbers: CVE-2014-9794 [Bulletin-CVE-2014-9794]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0973. Reason: This candidate is a reservation duplicate of CVE-2014-0973. Notes: All CVE users should reference CVE-2014-0973 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. [NIST-CVE-2014-9794]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2014-9794]
• Fixed on: 2014-04-21 [QC-CR646385]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9794]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2014-9795

(json)

• CVE numbers: CVE-2014-9795 [Bulletin-CVE-2014-9795]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not properly check for an integer overflow, which allows attackers to bypass intended access restrictions via crafted start and size values, aka Android internal bug 28820720 and Qualcomm internal bug CR681957, a related issue to CVE-2014-4325. [NIST-CVE-2014-9795]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2014-9795]
• Fixed on: 2014-06-18 [2]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9795]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-8892

(json)

• CVE numbers: CVE-2015-8892 [Bulletin-CVE-2015-8892]
• Coordinated disclosure?: unknown
• Categories: Elevation of privilege vulnerability in Qualcomm components
• Details: platform/msm_shared/boot_verifier.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to bypass intended access restrictions via a digest with trailing data, aka Android internal bug 28822807 and Qualcomm internal bug CR902998. [NIST-CVE-2015-8892]
• Discovered by: on: Unknown
• Reported on: 2016-07-01 [Bulletin-CVE-2015-8892]
• Fixed on: 2015-09-08 [QC-CR902998]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8892]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29