CVE-2017-18061

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen when processing AOA measurement event from WIGIG firmware in wilaoaevtmeas...

CVE-2018-3561

CVE-2018-3561 is a Qualcomm Diagchar-related issue affecting Android on MSM devices. The root cause is a race condition in diag_ioctl_lsm_deinit() that leads to a Use-After-Free condition. The vulnerability is characterized as Elevation of Privilege (EoP) with local access requirements and high i...

CVE-2017-18052

CVE-2017-18052 affects Qualcomm WLAN in Android devices (CAF Linux kernel line) via the wma_mgmt_tx_bundle_completion_handler() function. The root cause is improper input validation for cmpl_params->num_reports, param_buf->desc_ids, and param_buf->status received from firmware, leading t...

CVE-2017-18058

CVE-2017-18058 describes an out-of-bounds memory read in Qualcomm WLAN when processing wow_buf_pkt_len in wma_wow_wakeup_host_event(), triggered by firmware input. Affected platforms include Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux-based Android releases. Root cause is impr...

CVE-2017-15833

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereference in updateuserspacepower function in power leads to information exposure...

CVE-2017-14889

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler...

CVE-2017-18062

CVE-2017-18062 affects Qualcomm Wma in Android devices (Wma driver) with CAF-based Android/Linux stacks. Root cause: potential buffer overflow in wma_process_utf_event() while handling UTF events, leading to local elevation of privilege (EoP). Documented impact: EoP with high confidentiality, int...

CVE-2017-18057

CVE-2017-18057: In Android for MSM, Firefox OS for MSM, QRD Android, with CAF Linux kernels, improper input validation for vdev id in wma_nlo_scan_cmp_evt_handler() (received from firmware) can lead to an out-of-bounds memory read. Affected platforms and components are described in the NVD entry;...

CVE-2016-10393

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and allocated buffer size will be less than intended buffer size. The following buffer operations will...

Input validation

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdevid in wmaunifiedbcntxstatuseventhandler which is received from firmware leads to potential out of bounds memory read...

Denial of service

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is used to copy data has a size of only 8 bits and can be exceeded resulting in a denial of service...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

CVE-2017-14878

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is used to copy data has a size of only 8 bits and can be exceeded resulting in a denial of service...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wmap2pnoaeventhandler, there is no bound check on a value coming from firmware which can potentially lead to a buffer overwrite...

CVE-2017-18056

CVE-2017-18056 affects Android for MSM, Firefox OS for MSM, and CAF Linux-kernel builds, where improper input validation for vdev_id in wma_unified_bcntx_status_event_handler() (received from firmware) can cause an out-of-bounds memory read. The issue is tied to the WLAN stack (Qualcomm component...

CVE-2017-18068

CVE-2017-18068 involves an improper buffer length calculation in wma_roam_scan_filter() that can cause a buffer overflow. Affected are Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF with the Linux kernel. The issue is classified as EoP/High-impact (CVSS v3.0: 7.8) with loca...

CVE-2017-15821

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wmap2pnoaeventhandler, there is no bound check on a value coming from firmware which can potentially lead to a buffer overwrite...

CVE-2017-18069

CVE-2017-18069 affects Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernel, where an improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to a buffer overread. Public data lists CVSS base scores around ...

CVE-2017-14882

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function limprocessactionvendorspecific, a comparison is performed with the incoming action frame body without validating if the...

CVE-2017-18063

CVE-2017-18063 affects Android for MSM (CAF Linux kernel) with WLAN firmware; the issue is improper input validation for nlo_event in wma_nlo_match_evt_handler(), which can cause out-of-bounds memory access. Affected products are Android builds for MSM/CAF and related devices using the Linux kern...