Buffer overflow

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver...

Design/Logic Flaw

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

CVE-2018-11985

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, When allocating heap using user supplied size, Possible heap overflow vulnerability due to integer overflow in roundup to native pointer...

CVE-2018-11984

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

CVE-2018-11964

CVE-2018-11964 affects Android builds (Android for MSM, Firefox OS for MSM, QRD Android) using CAF Linux kernels. Root cause: exposure of hashed content in /etc/passwd, enabling a local attacker to access credentials and potentially escalate privileges; impact described as complete confidentialit...

CVE-2018-11961

CVE-2018-11961 affects Qualcomm GPS_AP_LINUX (Android CAF/Linux kernel stack). Root cause: an out-of-bounds vector index when updating GNSS configurations. Impact: local access leading to potential elevation of privilege or code execution as indicated by CVSS metrics (CVSSv3: 7.8 HIGH; local vect...

CVE-2018-11983

CVE-2018-11983 affects Android releases (Android for MSM, Firefox OS for MSM, QRD Android) built on CAF’s Linux kernel. The vulnerability is a kernel memory-management error where code accesses freed mask pointers after reallocating memory for a mask table, constituting a fault in the kernel’s ha...

CVE-2018-11965

Technical details about CVE-2018-11965 are not publicly provided in the connected documents. Available entries repeat the vulnerability description without concrete affected products, versions, root cause, or fixes. Monitor for updates from official advisories.

CVE-2018-11988

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Un-trusted pointer de-reference issue by accessing a variable which is already freed...

CVE-2018-11965

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Anyone can execute proptrigger.sh which will lead to change in properties...

CVE-2018-11987

CVE-2018-11987 describes a vulnerability affecting all CAF Android releases that use the Linux kernel. In boot, an unlikely memory allocation failure in the secure pool can cause a wrong-pointer access, potentially leading to a kernel panic. The affected surface is the secure pool management duri...

CVE-2018-11983

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Error in kernel observed while accessing freed mask pointers after reallocating memory for mask table...

CVE-2017-9704

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, There is no synchronization between msmvb2 buffer operations which can lead to use after free...

CVE-2018-11988

CVE-2018-11988 affects CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) via a Linux kernel issue described as an untrusted pointer dereference when accessing a variable that has already been freed. The vulnerability is classed as a Local attack with medium to high impact, dep...

CVE-2018-11960

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel...

CVE-2018-11964

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Exposing the hashed content in /etc/passwd may lead to security issue...

CVE-2018-11963

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver...

CVE-2017-9704

CVE-2017-9704 concerns CAF Android kernels (Android for MSM, Firefox OS for MSM, QRD Android) where there is no synchronization between msm_vb2 buffer operations, enabling a use-after-free condition. Root cause: missing synchronization in buffer handling within the kernel component msm_vb2. Affec...

CVE-2018-11984

CVE-2018-11984 affects Android releases based on CAF/Linux DIAG driver. A use-after-free and an out-of-bounds access in the DIAG driver can lead to a local, high-impact condition. The accompanying CVSS3 base score is 7.8 (HIGH); CVSS2 is 4.6 (MEDIUM). The provided documents do not include exploit...

CVE-2018-11961

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possibility of accessing out of bound vector index When updating some GNSS configurations...