CVE-2017-11074

CVE-2017-11074 affects Qualcomm WLAN in Android on MSM platforms (CAF-based kernels) via an obsolete set/reset ssid hotlist API in the WLAN stack. Root cause: legacy API left in kernel/UI interfaces enabling privilege escalation. Impact: as per CVSS, high confidentiality, integrity, and availabil...

CVE-2017-18061

CVE-2017-18061 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. The vulnerability stems from a potential buffer overflow when processing an AOA (Android Open Accessory) measurement event from WIGIG firmware in wil_aoa_evt_meas(), with Wil6210 as the rela...

CVE-2017-15833

CVE-2017-15833 affects Android on MSM builds (and related Firefox OS for MSM, QRD Android) with CAF Linux kernel, where untrusted pointer dereference in update_userspace_power() within the power driver can lead to information exposure. The description consistently links this issue to Qualcomm pow...

CVE-2017-18053

CVE-2017-18053 affects Android for MSM/CAF Linux kernel environments and Qualcomm WLAN (Wma) via wma_p2p_lo_event_handler, where improper input validation of fix_param->vdev_id leads to potential out-of-bounds memory reads from firmware. Affected component is the WLAN stack (Wma), with impact ...

CVE-2018-3560

CVE-2018-3560 describes a double-free in the Android sound path. Affected products include Android for MSM, Firefox OS for MSM, and QRD Android with CAF Linux-kernel branches. The root cause is a double-free in the Audio Driver when opening a sound compression device, leading to potential misuse ...

CVE-2017-18060

CVE-2017-18060 affects Qualcomm WLAN within Android on MSM devices (e.g., Android for MSM, CAF-based/Linux kernel stacks). The root cause is improper input validation for resp_event->vdev_id inside wma_unified_bcntx_status_event_handler(), as received from firmware, leading to potential out-of...

CVE-2017-11074

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is an obsolete set/reset ssid hotlist API...

CVE-2017-18053

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for fixparam-vdevid in wmap2ploeventhandler, which is received from firmware, leads to potential out of bounds memory read...

CVE-2017-18066

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads to use memory after it is freed in msmcoreioctl...

CVE-2017-18059

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wmascaneventcallback, which is received from firmware, leads to potential out of bounds memory read...

CVE-2017-18055

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wmievent-numvdevmacentries in wmapdevsethwmoderespevthandler, which is received from firmware, leads to potential buffer overflow...

CVE-2017-15830

CVE-2017-15830 affects the Qualcomm SME driver in Android on MSM (CAF Linux kernel lineage). The root cause is improper initialization of the ch_list array index in function sme_set_plm_request(), which can lead to a buffer overflow. The vulnerability is categorized as EoP (elevation of privilege...

CVE-2017-18050

The CVE-2017-18050 entry affects Android for MSM, Firefox OS for MSM, QRD Android, and CAF-based Android with the Linux kernel. The root cause is improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which processes data from firmware, risking a buffer overwrite and an ...

CVE-2017-15814

The connected CNVD-2018-06014 entry describes an information-disclosure vulnerability in Google's Android Qualcomm Camera_v2 driver, caused by insufficient input validation in the driver. The issue is tied to the Camera_v2 components on Android devices using Qualcomm hardware and enables local in...

CVE-2017-18052

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmplparams-numreports, parambuf-descids and parambuf-status in wmamgmttxbundlecompletionhandler, which is received from firmware, leads to potential out of...

CVE-2017-14887

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of messages of type eWNISMEMODIFYADDITIONALIES, an integer overflow leading to heap buffer overflow may potentially occur...

CVE-2017-11082

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in a firmware loading routine, a buffer overflow could potentially occur if multiple user space threads try to update the WLAN firmware file through sysfs...

CVE-2017-14889

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler...

CVE-2017-11082

CVE-2017-11082 affects Qualcomm WLAN in Android on MSM (and related CAF/Linux kernel builds) where a race condition in the firmware loading routine could lead to a buffer overflow if multiple user-space threads update the WLAN firmware file via sysfs. The root cause is a race in the firmware load...

CVE-2017-15834

CVE-2017-15834: A race condition in Qualcomm Diagchar's diag_dbgfs_read_dcistats while accessing diag_dbgfs_dci_data_index in Android for MSM platforms (CAF Linux kernel lineage) can lead to a heap overflow. Affected components include Qualcomm diagchar and kernel subsystems across Android builds...