CVE-2017-15850: Exposure of Sensitive Information to an Unauthorized Actor

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers...

CVE-2017-15849: Use After Free

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a LayerStack can be destroyed in between Validate and Commit by the application resulting in a Use After Free condition...

CVE-2017-9712: Out-of-bounds Read

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlanhddcfg80211setie, a buffer over-read occurs...

PT-2018-8530

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer over-read issue occurs when userspace provides a too-large IE length in wlan hd...

PT-2018-8523

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A specially-crafted HDMI CEC message can cause stack memory corruption in the affected...

PT-2018-6014

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description: The issue allows userspace to read values from audio codec...

PT-2018-5315

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to a fixed version Firefox OS for MSM versions prior to a fixed version QRD Android versions prior to a fixed version All Android releases from CAF using the Linux kernel versions prior to a fixed version...

PT-2018-5726

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue occurs during the update of the FOTA partition in the mentioned operating...

PT-2018-5310

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue allows access to uninitialized memory while flashing a ubi image...

PT-2018-5316

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A potential buffer overflow issue exists due to the hdd parse...

PT-2018-5309

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue occurs when updating a firmware image, where data is read from flash into RAM...

PT-2018-5729

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A kernel memory overwrite can potentially occur in the pp pgc get config graphics driv...

PT-2018-6010

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue arises from an invalid input of firmware size, specifically a negative value...

PT-2018-6012

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description: A race condition exists in the SPCom kernel driver when...

PT-2018-6013

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A buffer overflow vulnerability from userspace may potentially exist in the fastrpc...

PT-2018-8529

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version All Android releases from CAF using the Linux kernel versions prior to the fixed version...

CVE-2017-11069: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow...

PT-2018-5727

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue is related to a potential memory leak of 1088 bytes of stack memory when...

CVE-2017-11081: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a potential buffer overflow vulnerability in hddparsesetrmcenablecommand and hddparsesetrmcactionperiodcommand APIs as buffers defined in this API can hold maximum 32 bytes but...

CVE-2017-15845: Improper Input Validation

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size negative value from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation...