86 matches found
CVE-2018-5852
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...
CVE-2018-5852
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...
CVE-2018-5852 Buffer Over-read in IPA
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...
CVE-2018-5852 Buffer Over-read in IPA
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4nat'...
CVE-2021-1963
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
Design/Logic Flaw
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2021-1963
CVE-2021-1963 describes a use-after-free in the IPA driver of Qualcomm Snapdragon SoCs (across Snapdragon Auto/Compute/Connectivity/IoT/Wearables families) caused by insufficient validation of the rule count in the filter table. The issue affects kernel components and is documented with a CVSS v3...
CVE-2021-1963
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2019-14047
While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...
Input validation
While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...
CVE-2019-14047
CVE-2019-14047 affects Qualcomm/Snapdragon IPA driver: a lack of input validation for the rule ID when processing route add rule IOCTL can lead to a vulnerability in the IPA HW commit list across multiple Snapdragon platforms (APQ8053, APQ8096AU, MDM9607, MSM89xx, QCN7605, QCS605, SC8180X, SDA845...
CVE-2019-14047
While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...
CVE-2018-13900
Use-after-free vulnerability will occur as there is no protection for the route tables rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640,...
CVE-2018-13900
CVE-2018-13900 is a use-after-free vulnerability in the IPA driver’s route table handling, where there is no protection for the route rule. Affected are Snapdragon platforms across multiple product families (e.g., Snapdragon Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) an...
CVE-2018-13900
Use-after-free vulnerability will occur as there is no protection for the route tables rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640,...
Design/Logic Flaw
Use-after-free vulnerability will occur as there is no protection for the route tables rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640,...
CVE-2018-5846
A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPAIOCNOTIFYWANUPSTREAMROUTEADD/IPAIOCNOTIFYWANUPSTREAMROUTEDEL/IPAIOCNOTIFYWANEMBMSCONNECTED are called in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...
Race condition
A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPAIOCNOTIFYWANUPSTREAMROUTEADD/IPAIOCNOTIFYWANUPSTREAMROUTEDEL/IPAIOCNOTIFYWANEMBMSCONNECTED are called in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...
CVE-2018-5846
A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPAIOCNOTIFYWANUPSTREAMROUTEADD/IPAIOCNOTIFYWANUPSTREAMROUTEDEL/IPAIOCNOTIFYWANEMBMSCONNECTED are called in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...
CVE-2018-5846
CVE-2018-5846 affects the IPA driver in Android CAF (Android for MSM, Firefox OS for MSM, QRD Android) on Linux kernels. The issue is a Use-After-Free in the IPA driver that can occur when IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EM...