CVE-2018-5859

CVE-2018-5859 describes a race-condition–driven use-after-free in the MDSS MDP driver used by CAF Android builds on the Linux kernel, prior to the 2018-07-05 patch level. The issue can trigger a Use After Free condition on affected devices (Android for MSM, Firefox OS for MSM, QRD Android). Affec...

CVE-2018-5859: Concurrent Execution using Shared Resource with Improper Synchronization

Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, a Use After Free condition can occur...

Android on Nexus Qualcomm Component Privilege Gain Vulnerability

Android on Nexus 5 is an open source Linux-based operating system for the Nexus 5 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of the Qualcomm devices. A...

UBUNTU-CVE-2015-8939

drivers/video/msm/mdp4util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug...

CVE-2016-2443

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

CVE-2016-2443

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

Code injection

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

CVE-2016-2443

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

CVE-2016-2443

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

CVE-2016-2443

The CVE-2016-2443 entry concerns the Qualcomm MDP driver on Android (pre May 1, 2016) affecting Nexus 5 and Nexus 7 (2013). The root cause is a privilege-escalation flaw that lets a locally executed crafted application gain kernel-level privileges. The Android security bulletin lists this issue u...

CVE-2016-2443: Undefined Security Weakness

The Qualcomm MDP driver in Android before 2016-05-01 on Nexus 5 and Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 26404525...

Digital Paradise Mobile Office Middleware MDP Module Arbitrary File Download Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. An arbitrary file download vulnerability exists in the MDP module of Digital Paradise's mobile office...

CVE-2014-4323

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...

UBUNTU-CVE-2014-4323

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...

CVE-2014-4323

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...

CVE-2014-4323

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...

CVE-2014-4323

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...

CVE-2014-4323

The CVE-2014-4323 issue affects the Linux kernel 3.x MDP display driver (mdp_lut_hw_update in drivers/video/msm/mdp.c) used in Qualcomm QuIC Android MSM contributions. The vulnerability stems from insufficient validation of certain start and length values in an ioctl call, enabling privilege esca...

CVE-2014-4323: Improper Input Validation

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...