263 matches found
CVE-2017-11072
Summary: CVE-2017-11072 corresponds to an elevation-of-privilege vulnerability in Android's Partition table updater, affecting Google Pixel/Nexus devices. Affected component: Partition table updater in Android on CAF/Kernel stack with GPT header processing. Root cause: Buffer overflow when calcul...
CVE-2017-11072
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs...
Design/Logic Flaw
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage...
UBUNTU-CVE-2017-15847
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the SPCom kernel driver, a race condition exists when creating a channel...
CVE-2017-9689
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption...
CVE-2017-14869
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while performing update of FOTA partition, uninitialized data can be pushed to storage...
CVE-2017-9712
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, if userspace provides a too-large IE length in wlanhddcfg80211setie, a buffer over-read occurs...
CVE-2017-11081
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a potential buffer overflow vulnerability in hddparsesetrmcenablecommand and hddparsesetrmcactionperiodcommand APIs as buffers defined in this API can hold maximum 32 bytes but...
CVE-2017-11079
Technical details for CVE-2017-11079 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2017-9712
CVE-2017-9712 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. A too-large IE length provided by userspace to wlan_hdd_cfg80211_set_ie triggers a buffer over-read. Documented impact is a buffer over-read; exploitation details are not provided in the supp...
CVE-2017-9689
CVE-2017-9689 is linked to stack memory corruption via HDMI CEC in the Qualcomm HDMI driver, affecting Android for MSM and related CAF/Linux-based builds. Connected sources corroborate the issue across Android for MSM, Firefox OS for MSM, and QRD Android, with the HDMI driver listed as the compon...
CVE-2017-11066
CVE-2017-11066 affects Android on MSM platforms (Android for MSM, Firefox OS for MSM, QRD Android) with CAF Linux kernel; during ubi image flashing, an uninitialized memory region could be accessed. Connected records corroborate this description. The provided documents do not include explicit exp...
CVE-2017-15850
CVE-2017-15850 affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF builds using the Linux kernel; described impact is that userspace can read values from audio codec registers. The connected documents do not provide concrete root-cause details or a remediation/fix. No exploitation...
CVE-2017-15848
CVE-2017-15848 affects Android for MSM (CAF builds) via the fastrpc kernel driver. A userspace-triggered buffer overflow in the fastrpc driver is the stated vulnerability, potentially enabling local impact with high CVSS2/3 scores (LOCAL, LOW/LOW privileges for CVSS2; LOCAL, LOW privileges, NONE ...
CVE-2017-11069
CVE-2017-11069 is a heap overflow in the SafeSwitch image handling, reported for Android for MSM platforms (CAF/Linux kernel) and associated Qualcomm bootloader contexts. The vulnerability arises from manipulation of SafeSwitch Image data, and is categorized in the Qualcomm bootloader area as an ...
Race condition
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path...
Code injection
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale...
CVE-2017-14908
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the number of blocks to verify...
Race condition
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the GLink kernel driver, a Use After Free condition can potentially occur...