CVE-2018-5907

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5855

CVE-2018-5855 affects Qualcomm WLAN Host components within Android CAF builds. The issue arises from padding/shrinking a nested WMI packet, potentially causing a buffer over-read in all CAF Android releases prior to the patched level. According to the CVE entry, this is rated critical (CVSS v3: 9...

CVE-2018-3587

CVE-2018-3587 is tied to the Qualcomm qcacld-2.0 WLAN driver in Android CAF builds, where a Use-After-Free in a firmware memory dump feature can lead to Elevation of Privilege (EoP). The NVD listing shows a CVSS v3 base score of 7.8 (HIGH) with LOCAL attack vector, low complexity, and privileges ...

CVE-2018-5886

A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, which can lead to kernel memory being accessed...

CVE-2018-3587

In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...

CVE-2018-3570

In the cpuidle driver in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel, the listforeach macro was not used correctly which could lead to an untrusted pointer dereference...

CVE-2018-11304

CVE-2018-11304 describes a possible buffer overflow in msm_adsp_stream_callback_put caused by insufficient input validation of user-provided data, leading to an integer overflow across CAF-powered Android releases (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux kernel. The vuln...

CVE-2018-5858

CVE-2018-5858 concerns an out-of-bounds access in the audio debugfs for Android CAF builds using the Linux kernel, affecting Android for MSM, Firefox OS for MSM, and QRD Android prior to the 2018-07-05 security patch level. The issue is triggered via the audio debugfs component of the kernel, wit...

CVE-2018-5872

CVE-2018-5872 affects Qualcomm WLAN (qca-wifi-host-cmn) in Android CAF releases. The issue arises from missing length checks on Beacon Information Elements, enabling a nearby attacker to cause a buffer overread and potentially execute arbitrary code in a privileged process. Android’s 2018-07-05 p...

CVE-2018-3570

CVE-2018-3570 refers to a vulnerability in the cpuidle driver used by CAF Android builds (Android for MSM, Firefox OS for MSM, QRD Android) that rely on the Linux kernel. The issue arises from incorrect use of the list_for_each macro, which could lead to an untrusted pointer dereference. Connecte...

CVE-2018-5897

While reading the data from buffer in dciprocessctrlstatus there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5893

While processing a message from firmware in httt2hmsghandlerfast in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a buffer overwrite can occur...

CVE-2018-5898

Integer overflow can occur in msmpcmadspstreamcmdput function if the user supplied data "paramlength" goes beyond certain limit in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5899

In Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, whenever TDLS connection is setup, we are freeing the netbuf in oltxcompletionhandler and after that, we are accessing it in NBUFUPDATETXPKTCOUNT causing a...

CVE-2018-5890

If the fdttotalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5895

Buffer over-read may happen in wmaprocessutfevent due to improper buffer length validation before writing into parambuf-numwowpacketbuffer in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5896

In Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied...

CVE-2018-5830

While processing the HTTT2HMSGTYPEMGMTTXCOMPLIND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-3577

While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5888

While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...