CVE-2018-12006

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Users with no extra privileges can potentially access leaked data due to uninitialized padding present in display function...

Stack overflow

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region...

Design/Logic Flaw

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace...

Design/Logic Flaw

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Heap memory was accessed after it was freed...

CVE-2018-13893

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace...

CVE-2018-11962

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory...

CVE-2018-12011

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure...

CVE-2018-12011

Technical details about CVE-2018-12011 are not provided in the supplied documents; no exposed affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2018-11962

CVE-2018-11962 affects Qualcomm audio components. The issue is a Use-After-Free in the heap during loading of audio effects config in the audio effects factory. It is a local (LOCAL) vulnerability with low attack complexity and requires no user interaction, per CVSS data (AV:L, AC:L, PR:L, UI:N, ...

CVE-2018-12010

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region...

CVE-2018-12006

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Users with no extra privileges can potentially access leaked data due to uninitialized padding present in display function...

CVE-2018-12006

The CVE-2018-12006 entry applies to CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. Root cause: uninitialized padding in a display function. Impact: local attackers with no privileges may access leaked data (information disclosure). Exploitation ...

CVE-2018-13893

CVE-2018-13893 affects Android platforms built on CAF Linux kernels, with the root cause described as out-of-bounds access when copying masks to userspace due to using an old value of the msg mask table count. The CVSS3 vector (LOCAL, LOW CIA/IIA, HIGH impact) indicates local access is required a...

CVE-2018-13889

CVE-2018-13889 affects Android CAF kernel use-after-free in heap memory, leading to heap access after free in CAF-based Android releases (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability is tied to the Linux kernel portion used by CAF; the NVD entry shows a base score of 7.2 (...

CVE-2018-13889

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Heap memory was accessed after it was freed...

MGASA-2019-0045 Updated wavpack packages fix security vulnerabilities

Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service CVE-2018-6767. It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cau...

Updated wavpack packages fix security vulnerabilities

Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service CVE-2018-6767. It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cau...

Debian DSA-4366-1 : vlc - security update

An integer underflow was discovered in the CAF demuxer of the VLC media player. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4366. The text itself is copyright C Software in the Public Interest, Inc...

[SECURITY] [DSA 4366-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4366-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2019 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...