PT-2017-11705

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to an integer overflow that may lead to a heap buffer overflow in a...

PT-2017-13740

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a memory allocation problem in the mobicore driver, where there ...

CVE-2017-14907: Undefined Security Weakness

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is reduced while deriving disk encryption key...

CVE-2017-11006: Use After Free

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning...

PT-2017-13739

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue affects Android for MSM, Firefox OS for MSM, and QRD Android, with all Android...

CVE-2017-14900: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCANL80211VENDORSUBCMDGETCHAINRSSI vendor command, in which attribute QCAWLANVENDORATTRMACADDR contains fewer than 6 bytes, a buffer overrun occurs...

PT-2017-19120

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer overwrite issue is present in the fw name store function when an image name of ...

PT-2017-13749

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A crafted binder request can cause an arbitrary unmap in MediaServer, potentially leadin...

PT-2017-3419

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3420

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified Description The issue exists due to insufficient input validation in the...

CVE-2017-11015

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIRMACAUTHCHALLENGELENGTH is set to 128 which may result in buffer overflow since the frame parser allows challenge text of length up to 253 bytes, but the drive...

CVE-2017-11015

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIRMACAUTHCHALLENGELENGTH is set to 128 which may result in buffer overflow since the frame parser allows challenge text of length up to 253 bytes, but the drive...

CVE-2017-11014

CVE-2017-11014 describes a buffer overflow in the Android/CAF/Linux kernel stack when parsing a Measurement Request IE in a Roam Neighbor Action Report. Affected products include Android for MSM, Firefox OS for MSM, and QRD Android with CAF Linux kernel releases. The CVSS data indicates high impa...

PT-2017-19122

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A user-space pointer is directly accessed in a camera driver,...

PT-2017-11730

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue allows mapping memory via /proc/ath pktlog/cld to user space, potentially...

PT-2017-11733

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overread issue is observed in the wlan hdd cfg80211...

PT-2017-18255

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to a missing race condition protection...

PT-2017-19121

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A data leak may occur when processing OEM unlock/unlock-go...

PT-2017-19133

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overflow issue exists in the kernel driver MDSS,...

PT-2017-11686

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue affects user privacy by including information elements in probe requests that...