CVE-2017-14916

CVE-2017-14916 describes a buffer size validation issue in the message passing interface within Android for MSM, Firefox OS for MSM, and QRD Android (CAF Linux kernel). The flaw arises from improper validation of buffer sizes, enabling a potential high-impact, network-exposed condition with remot...

CVE-2017-14917

CVE-2017-14917 affects Android ecosystems (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel variants. The issue stems from improper validation of buffer sizes in the message passing interface, enabling potential exploitation via crafted inputs. The CVSS data indicates a cri...

CVE-2017-11005

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path...

CVE-2017-9716

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implements an alternative channel for usermode applications to talk to QSEE applications...

CVE-2017-14918

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition can occur...

CVE-2017-11006

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning...

CVE-2017-14909

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated...

CVE-2017-14904

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an arbitrary unmap in MediaServer...

CVE-2017-14895

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, after a subsystem reset, iwpriv is not giving correct information...

CVE-2017-14902

CVE-2017-14902 describes a race condition in the GLink kernel driver across Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The vulnerability is a Use-After-Free in the GLink driver that can potentially allow a local attacker to compromise the device (as indic...

CVE-2017-11007

CVE-2017-11007 is an Elevation of Privilege in Qualcomm Fastboot (EoP, High) with local access. The available connected records indicate a root cause of buffer overflow in the Partition name during conversion of ascii to unicode in HandleMetaImgFlash, leading to stack corruption. There are no exp...

CVE-2017-14914

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale...

CVE-2017-14916

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated...

CVE-2017-14914

CVE-2017-14914 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. The issue arises when handles in the global client structure can become stale, per the NVD description. CVSS: 3.0/3.0 vector indicates Network attack, no user interaction, with High/CRITICAL...

CVE-2017-14904

CVE-2017-14904 affects Android’s libgralloc/MediaServer path. A crafted binder request can cause an arbitrary unmap in MediaServer, enabling sandbox escape and, per ThreatPost, could allow code injection into system_server via a malicious URL in Chrome. Exploitation details in sources describe an...

CVE-2017-14897

The CVE-2017-14897 entry corresponds to a local privilege-elevation flaw in the RPMB/CAF kernel path used by Android on MSM/CAF builds. The described issue is that, while handling QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND, a userspace buffer is directly accessed from kernel space, enabling local explo...

CVE-2017-14895

CVE-2017-14895 affects Android for MSM/CAF builds using the Linux kernel. After a subsystem reset, the iwpriv interface does not report accurate information. The vulnerability is triggered locally (LOCAL) with low attack complexity and requires no authentication, potentially impacting confidentia...

CVE-2017-11005

CVE-2017-11005 describes a Use-After-Free in the Android MSM stack (including CAF/Linux kernel paths) during deinitialization. The issue affects Android/CAF-derived builds and related MSM variants (Firefox OS for MSM, QRD Android) and is listed with high to critical impact in the NVD metrics (CVS...

CVE-2017-11006

CVE-2017-11006 is a Use-After-Free vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android (CAF Linux kernel lineage) during positioning. The connected NVD entry confirms the issue and classifies it as high-severity with CVSS v3.0 base score 9.8 (Network, No user interaction, privil...

CVE-2017-9716

CVE-2017-9716 affects the Qualcomm Qbt1000 driver (Qualcomm components) in Android for MSM and related CAF-based kernels. The vulnerability is described as an Elevation of Privilege (EoP) issue, with CVE records (NVD, CVELIST, CNVD) confirming the driver as the vulnerable component and noting an ...