246 matches found
CVE-2018-3598: Exposure of Sensitive Information to an Unauthorized Actor
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to information leak and out-of-bounds access...
CVE-2017-17770: NULL Pointer Dereference
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur...
CVE-2017-18147: Improper Input Validation
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated...
CVE-2017-17764
In all Qualcomm products with Android releases from CAF using the Linux kernel, the numfailureinfo value from firmware is not properly validated in wmarxaggrfailureeventhandler so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow...
The vulnerability of the Qualcomm IPC operating system’s Android component, allowing a hacker to execute arbitrary code
The vulnerability of the Qualcomm IPC operating system’s Android component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2017-11000
In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...
Out-of-bounds
In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in cshow, due to compathwcapstr not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access...
CVE-2017-8247
In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to getpid being called more than once, however putpid being called only once in function...
CVE-2017-9720
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur...
DEBIAN-CVE-2017-9725
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...
CVE-2017-11002
In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur...
CVE-2017-8280
In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch...
The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to cause a service failure.
The vulnerability in all components of the Qualcomm Android operating system, from the CAF repository that uses Linux kernel, is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...
The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to trigger a race condition.
The vulnerability in all components of the Qualcomm Android operating system from the CAF repository, which uses Linux kernel, is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to trigger a race condition...
The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, is due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause breaches of the confidentiality,...
Google Android Qualcomm Component eMBMS Unauthorized Operation Vulnerability
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in eMBMS of the Qualcomm closed-source component in...
Google Android Qualcomm component buffer overflow vulnerability (CNVD-2017-26643)
Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A buffer overflow vulnerability exists in the downlink 3G NAS message handling process ...
Null pointer dereference
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message...