Cross site scripting

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader-MaxPtCnt' and which could result in OO...

CVE-2018-11262

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader-MaxPtCnt' and which could result in OO...

CVE-2018-11262

CVE-2018-11262 is a critical issue documented in Qualcomm bootloader components (Android bulletin entry) with an associated out-of-bounds write risk in GPT patching caused by the TotalPart count exceeding GPT Header MaxPtCnt. The connected records indicate this CVE affects Qualcomm bootloader in ...

PT-2018-10434

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version Description The issue arises when trying to determine the total number of partitions via...

CVE-2018-11262: Incorrect Calculation

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader-MaxPtCnt' and which could result in OO...

The vulnerability of the Qualcomm GPT listener component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm GPT listener component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Buffer overflow

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, an...

CVE-2016-10425

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, an...

CVE-2016-10425: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, an...

PT-2018-1236

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...

SUSE SLED12 / SLES12 Security Update : ecryptfs-utils (SUSE-SU-2018:0336-1)

This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...

openSUSE Security Update : ecryptfs-utils (openSUSE-2018-126)

This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...

The vulnerability of the microprogrammed software of the GPT-2541GNAC and DSL-100HN-T1 routers, related to access control deficiencies, allows attackers to gain access to devices with root privileges.

The vulnerability of the microprogrammed software of the GPT-2541GNAC and DSL-100HN-T1 routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to devices with root privileges using the command “/bin/sh”...

SUSE-SU-2018:0336-1 Security update for ecryptfs-utils

This update for ecryptfs-utils fixes the following issues: - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...

openSUSE Security Update : systemd (openSUSE-2018-117)

This update for systemd fixes several issues. This security issue was fixed : - CVE-2018-1049: Prevent race that can lead to DoS when using automounts bsc1076308. These non-security issues were fixed : - core: don't choke if a unit another unit triggers vanishes during reload - delta: don't ignor...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs...

CVE-2017-11072

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs...

CVE-2017-11072

Summary: CVE-2017-11072 corresponds to an elevation-of-privilege vulnerability in Android's Partition table updater, affecting Google Pixel/Nexus devices. Affected component: Partition table updater in Android on CAF/Kernel stack with GPT header processing. Root cause: Buffer overflow when calcul...

CVE-2017-11072: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs...

PT-2018-5311

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer overflow occurs when calculating CRC for GPT header fields with partition entri...