CVE-2016-5864

In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...

CVE-2016-5863

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

CVE-2017-6421: Buffer Copy without Checking Size of Input

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

CVE-2016-5855: Exposure of Sensitive Information to an Unauthorized Actor

In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking if the source buffer is large enough...

CVE-2017-8243: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file...

CVE-2016-5867: Undefined Security Weakness

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

CVE-2016-5858: Exposure of Sensitive Information to an Unauthorized Actor

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs...

CVE-2016-5861: Undefined Security Weakness

In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow...

CVE-2016-5863: Undefined Security Weakness

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

CVE-2016-5854: Exposure of Sensitive Information to an Unauthorized Actor

In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace...

PT-2017-3598

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3582

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3024

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to an integer overflow that can occur wh...

PT-2017-3411

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-2746

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android affected versions not specified Description The issue is related to an audio driver function where some parameters from userspace can cause integer overflow followed by...

PT-2016-3160

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android affected versions not specified Description The issue is related to a control associated with a codec, where type casting is performed to the container structure instea...

PT-2016-3159

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android for MSM affected versions not specified Qualcomm products with Firefox OS for MSM affected versions not specified Qualcomm products with QRD Android affected versions not specified Description The issue is relate...

Mozilla Firefox OS internationalization feature cross-site scripting vulnerability

Mozilla Firefox is an open source web browser that uses the Gecko engine. A cross-site scripting vulnerability exists in the internationalization feature of Mozilla Firefox OS versions prior to 2.5, which could be exploited by remote attackers to inject arbitrary web script or HTML via a...

CVE-2015-8512

The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses...

CVE-2015-8510

Cross-site scripting XSS vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted web site that is mishandled during "Add to home screen" bookmarking...