Race condition

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...

Race condition

An issue was discovered in the nsgetpath function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Andro...

Design/Logic Flaw

In wlanhddcfg80211vendorscan in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, when SCANSSIDS and QCAWLANVENDORATTRSCANFREQUENCIES are parsed, a buffer overwrite can potentially occur...

Integer overflow

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

Design/Logic Flaw

In the audio debugfs in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, out of bounds access can occur...

Design/Logic Flaw

While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur...

Integer overflow

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-3587

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...

CVE-2018-5855

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, a buffer over-read can potentially occur...

Null pointer dereference

A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, which can lead to kernel memory being accessed...

CVE-2018-11304

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5853

A race condition exists in a driver in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-05-05 potentially leading to a use-after-free condition...

CVE-2018-5865

While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur...

CVE-2018-5859

CVE-2018-5859 describes a race-condition–driven use-after-free in the MDSS MDP driver used by CAF Android builds on the Linux kernel, prior to the 2018-07-05 patch level. The issue can trigger a Use After Free condition on affected devices (Android for MSM, Firefox OS for MSM, QRD Android). Affec...

CVE-2018-5855

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, a buffer over-read can potentially occur...

CVE-2018-5864

CVE-2018-5864 maps to a Qualcomm WMA information-disclosure vulnerability affecting Android devices (Pixel/Nexus) prior to the 2018-07-05 patch level. The issue arises during processing of WMI_APFIND events in CAF/Linux kernel-based Android builds, causing a potential buffer over-read and informa...

CVE-2018-5873

The CVE-2018-5873 entry refers to a race-condition induced Use-After-Free in the Linux kernel before 4.11, specifically in __ns_get_path within fs/nsfs.c. This affects the mainline Linux kernel and Android builds derived from CAF for Android kernels (Android for MSM, Firefox OS for MSM, QRD Andro...

CVE-2018-5862

CVE-2018-5862 concerns Android CAF builds using the Linux kernel. In __wlan_hdd_cfg80211_vendor_scan(), when parsing SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES, a buffer overwrite can potentially occur in all Android releases before patch level 2018-07-05. CVSS data in the entry shows l...

CVE-2018-5853

CVE-2018-5853 describes a race condition in a driver used by CAF Android for MSM (Linux kernel variants) including Android for MSM, Firefox OS for MSM, and QRD Android. The issue potentially leads to a use-after-free condition. Impact details in the provided sources indicate local attack requirem...

CVE-2018-5858

In the audio debugfs in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, out of bounds access can occur...