CVE-2018-13889: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Heap memory was accessed after it was freed...

CVE-2018-12014: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer...

CVE-2018-13893: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace...

CVE-2018-12006: Exposure of Sensitive Information to an Unauthorized Actor

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Users with no extra privileges can potentially access leaked data due to uninitialized padding present in display function...

CVE-2018-12011: Use of Uninitialized Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure...

CVE-2018-11962: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory...

CVE-2018-11963: Out-of-bounds Read

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver...

CVE-2018-11964: Incorrect Permission Assignment for Critical Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Exposing the hashed content in /etc/passwd may lead to security issue...

CVE-2018-11919

Technical details (affected products, root cause, impact, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2018-5861: Incorrect Type Conversion or Cast

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader...

CVE-2018-11956: Undefined Security Weakness

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper mounting lead to device node and executable to be run from /dsp/ which presents a potential security issue...

CVE-2018-11260: Integer Overflow or Wraparound

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing a fast Initial link setup FILS connection request, integer overflow may lead to a buffer overflow when the key length is zero...

CVE-2018-5910: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a memory corruption can occur in kernel due to improper check in callers count parameter in display handlers...

CVE-2018-11914: Incorrect Permission Assignment for Critical Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper access control can lead to device node and executable to be run from /systemrw/ which presents a potential security...

CVE-2018-11907: Incorrect Permission Assignment for Critical Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper access control can lead to device node and executable to be run from /firmware/ which presents a potential issue...

CVE-2018-11946: Undefined Security Weakness

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

CVE-2018-11908: Incorrect Permission Assignment for Critical Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper access control can lead to device node and executable to be run from /data/ which presents a potential issue...

CVE-2018-11261: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, there is a possible Use-after-free issue in Media Codec process. Any application using codec service will be affected...

CVE-2018-11918: Double Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

CVE-2018-5856: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, due to a race condition, a Use After Free condition can occur in Audio...