CVE-2017-11092: Use After Free

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgslioctlgpucommand, a Use After Free condition can potentially occur...

PT-2017-3208

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a Use After Free condition in the KGSL driver function kgsl ioctl gpu command. This condition can potentially occur in the KGSL driver, which is part of the Android...

PT-2017-19114

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A race condition in two KGSL driver functions can lead to a Use After Free condition. This issue affects Qualcomm products that...

CVE-2017-9682: Exposure of Sensitive Information to an Unauthorized Actor

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition...

CVE-2017-7366

In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters...

Code injection

In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters...

CVE-2017-7366

CVE-2017-7366 affects Android devices using CAF Linux kernel with KGSL kernel graphics guest library: a KGSL ioctl fails to validate all parameters, enabling an elevation of privilege within the GPU driver. The vulnerability is listed under Qualcomm components in the 2017-06-05 Android bulletin; ...

PT-2017-17687

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a KGSL ioctl in the Linux kernel used by Android releases from CAF, where the ioctl was not validating all of its parameters. Recommendations At the moment, there is n...

CVE-2017-7366: Improper Input Validation

In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters...

PT-2017-3959

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions MDM9150 through MDM9650 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 throug...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

Null pointer dereference

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

CVE-2016-5340

CVE-2016-5340 is tied to a vulnerability in the KGSL Linux Graphics Module exposed by a QuIC Android patch for Linux kernel 3.x. The issue arises from the function is_ashmem_file in drivers/staging/android/ashmem.c, where pointer validation is mishandled. This design flaw can allow an attacker to...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

CVE-2016-5340: Improper Input Validation

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

Qualcomm Adreno GPU MSM Driver - perfcounter Query Heap Overflow

Exploit for Android platform in category dos / poc / Source: https://code.google.com/p/google-security-research/issues/detail?id=734 The Adreno GPU driver for the MSM Linux kernel contains a heap overflow in the IOCTLKGSLPERFCOUNTERQUERY ioctl command. The bug results from an incorrect conversion...

CVE-2012-4222

drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center QuIC Graphics KGSL kernel-mode driver for Android 2.3 through 4.2 allows attackers to cause a denial of service NULL pointer dereference via an application that uses crafted arguments in a local kgslioctl call...

PT-2016-4996

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the mishandling of the KGSL MEMFLAGS GPUREADONLY flag in the MSM graphics driver for the Linux kernel. This mishandling allows attackers to gain privileges by leveraging accidental...