SUSE CVE-2016-5863

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

SUSE CVE-2017-6421

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

SUSE CVE-2017-8281

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI...

SUSE CVE-2017-9725

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...

Qualcomm Android Privilege Escalation

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Qualcomm Android Graphical Component Code Execution

The vulnerability of the graphical component of the Qualcomm Android operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code using an application installed on the device...

Qualcomm Android Buffer Overflow

The vulnerability of the Qualcomm Android operating system is related to array indexing errors. Exploiting this vulnerability can allow attackers to cause buffer overflows in memory by using malicious XML data in the firehose directory...

Qualcomm Android DoS

The vulnerability of the Qualcomm Android operating system is related to errors in the watchdog timer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Qualcomm WLAN Driver Privilege Escalation

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is due to an overflow in the buffer in the “stack”. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Qualcomm Android Data Compromise

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Android Data Compromise

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Android Data Compromise

The vulnerability of the Qualcomm Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information using the RIL interface...

Qualcomm Android Buffer Overflow

The vulnerability of the Qualcomm operating system Android is caused by an overflow in memory buffers. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Android Memory Corruption

The vulnerability of the Qualcomm Android operating system arises from operations that occur outside the buffer in memory when processing requests through the QDI interface. Exploiting this vulnerability allows a malicious actor to trigger memory corruption by using a specially crafted request...

Qualcomm Android Buffer Overflow

The vulnerability of the qcriluimclearencryptedpin function in Qualcomm’s Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...

Qualcomm Android Privilege Escalation

The vulnerability of the Qualcomm operating system Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Qualcomm Android Data Compromise

The vulnerability of the Qualcomm operating system Android is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Android Privilege Escalation

The vulnerability of the Qualcomm operating system Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Qualcomm Android Privilege Escalation

The vulnerability of the Qualcomm operating system Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2017-15855

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, the camera application triggers "user-memory-access" issue as the Camera CPP module Linux driver directly accesses the application...