CVE-2017-15859

While processing the QCANL80211VENDORSUBCMDSETTXPOWERSCALEDECRDB vendor command, in which attribute QCAWLANVENDORATTRTXPOWERSCALEDECRDB contains fewer than 1 byte, in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-11 a buffer overrun occurs...

CVE-2017-17769

Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver...

CVE-2017-17766

In wmapeerinfoeventhandler in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of numpeers received from firmware is not properly validated so that an integer overflow vulnerability in the size of a buffer allocation may potentially lead to a buffer overflow...

PT-2018-5737

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-10-18 Firefox OS for MSM versions prior to 2017-10-18 QRD Android versions prior to 2017-10-18 Description: The issue arises in the wma unified power debug stats event handler function when the param...

PT-2018-8524

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a race condition in the debug message output functionality withi...

PT-2018-5994

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-10-11 Firefox OS for MSM versions prior to 2017-10-11 QRD Android versions prior to 2017-10-11 Description: The issue arises from improper validation of values from firmware in the spectral create samp m...

PT-2018-5732

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-08-31 Firefox OS for MSM versions prior to 2017-08-31 QRD Android versions prior to 2017-08-31 Description: The issue arises when the IPA driver is processing IOCTL commands without a mutex lock on...

PT-2018-5744

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-09-19 Firefox OS for MSM versions prior to 2017-09-19 QRD Android versions prior to 2017-09-19 Description: The issue is related to the function msm pcm hw params where the return value of q6asm open...

PT-2018-5730

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A heap overread issue exists in the handler for the ioctl command VIDIOC MSM ISP DUAL ...

PT-2018-5743

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue is related to the KGSL driver function gpuobj map useraddr, where the conten...

PT-2018-8526

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to 2017-06-06 Firefox OS for MSM versions prior to 2017-06-06 QRD Android versions prior to 2017-06-06 Description The issue arises when the length of the attribute value for STA EXT CAPABILITY in the wlan hdd...

PT-2018-5731

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-06-21 Firefox OS for MSM versions prior to 2017-06-21 QRD Android versions prior to 2017-06-21 Description: The issue arises from the lack of bounds checking on the params-entriesi.vfe intf parameter in...

PT-2018-5997

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-10-20 Firefox OS for MSM versions prior to 2017-10-20 QRD Android versions prior to 2017-10-20 Description: A double free issue may exist due to a race condition in the MDSS rotator. This occurs when two...

PT-2018-6016

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue is related to an information leak of the ISPIF base address in the camera...

PT-2018-6022

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-08-11 Firefox OS for MSM versions prior to 2017-08-11 QRD Android versions prior to 2017-08-11 Description: A buffer overrun occurs when processing the QCA NL80211 VENDOR SUBCMD SET TXPOWER SCALE DECR DB...

PT-2018-8525

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions prior to 2017-06-03 Description A NULL pointer dereference may potentially occur when an atomic commit is issued o...

PT-2018-8531

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to 2017-06-05 Firefox OS for MSM versions prior to 2017-06-05 QRD Android versions prior to 2017-06-05 Description The issue concerns the touchscreen driver synaptics dsx, where the size of a stack-allocated buff...

PT-2018-6011

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-09-16 Firefox OS for MSM versions prior to 2017-09-16 QRD Android versions prior to 2017-09-16 Description: The issue is related to an untrusted pointer dereference that may occur in the video ioctl2...

PT-2018-5736

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-10-13 Firefox OS for MSM versions prior to 2017-10-13 QRD Android versions prior to 2017-10-13 Description: A use-after-free condition may occur when calling the IPA IOCTL handler for IPA IOC ADD HDR PRO...

PT-2018-6568

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-10-03 Firefox OS for MSM versions prior to 2017-10-03 QRD Android versions prior to 2017-10-03 Description: The issue arises from improper validation of the num peers value received from firmware in the...