CVE-2017-11062: Out-of-bounds Read

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently attributes are not validated in wlanhddcfg80211doacs which can potentially lead to a buffer overread...

PT-2017-11717

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer over-read issue can occur when processing a specially crafted cfg80211 vendor...

PT-2017-11726

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to the lack of validation of attributes ...

PT-2017-11715

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer over-read issue occurs when processing a specially...

PT-2017-3616

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected versions not specified Description: The issue is related to t...

PT-2017-3618

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3416

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3417

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Android versions prior to the fixed version QRD Android versions prior to the fixed version Description The issue is related to insufficient input validation in the message passing interface ...

PT-2017-3599

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

Stack overflow

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

Buffer overflow

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

Out-of-bounds

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

CVE-2016-5859

In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow...

CVE-2016-5860

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...

Integer overflow

In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...

CVE-2017-8243

A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file...

CVE-2016-5867

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

CVE-2016-5858

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs...

CVE-2016-5859

CVE-2016-5859 involves a vulnerability in the Qualcomm sound driver across Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when a function is called with a very large length, triggering an integer overflow that is followed by a buffer overflow. The description identifies me...

CVE-2016-5860

CVE-2016-5860 affects the Qualcomm sound/ audio driver stack on Android-based devices (Qualcomm MSM Android builds, Firefox OS for MSM, QRD Android). The issue occurs when a function is called with an excessively large length, triggering an integer overflow that leads to a heap buffer overflow. T...