CVE-2017-14884

CVE-2017-14884 affects Qualcomm WLAN components in Android CAF builds using the Linux kernel. Root cause: missing bounds check on data_len in WLANQCMBR_McProcessMsg, potentially causing a buffer overflow in WLANFTM_McProcessMsg. Impact: elevation of privilege on a locally exploited path within Qu...

The vulnerability of the Qualcomm GNSS operating system component in Android, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm GNSS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the message transfer interface (Qualcomm Trusted Execution Environment) of the Android operating system, which allows a perpetrator to execute arbitrary code

The vulnerability of the message transfer interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to improper checking of buffer sizes. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm GPS operating system for Android, which allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm GPS operating system for Android exists due to insufficient checking of the value of the counter read from the file. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm Storage component in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm Storage component in the Android operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm IPC operating system’s Android component, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm IPC operating system’s Android component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the message transfer interface (Qualcomm Trusted Execution Environment) of the Android operating system, which allows a perpetrator to execute arbitrary code

The vulnerability of the message transmission interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm GPS operating system for Android, which allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm GPS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Android Qualcomm component 'wma_rx_aggr_failure_event_handler()' function elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm WLAN driver is a wireless driver. An elevation of privilege vulnerability exists in the 'wmarxaggrfailureeventhandler' function of Qualcomm WLAN in Android, which...

Google Android Qualcomm Graphics_Linux Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm GraphicsLinux is one of Qualcomm's Linux-based graphics components. An elevation of privilege vulnerability exists in Qualcomm GraphicsLinux in Android. An attacker c...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-05458)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm component WLan. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android Qualcomm Media framework component elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Media framework is one of the media development frameworks from Qualcomm. An elevation of privilege vulnerability exists in Qualcomm Media framework in Android. A...

Google Android Qualcomm WLAN component elevation of privilege vulnerability (CNVD-2018-03818)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, and Qualcomm WLAN is one of the wireless LAN components developed by Qualcomm. An elevation of privilege vulnerability exists in Qualcomm WLAN in Android, which stems from the program's...

Google Android Qualcomm WLAN Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. A remote code execution vulnerability exists in Qualcomm WLAN in Android. A remote attacker could exploit this vulnerability to execute...

Google Android Qualcomm WLAN Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm WLAN driver is a wireless driver. An elevation of privilege vulnerability exists in Qualcomm WLAN for Android, which stems from the program failing to properly...

Android Security Bulletin—February 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2017-15860

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur...

EU Antitrust Regulators Fine Qualcomm $1.2 Billion Over Apple Deal

The antitrust fine has hit Qualcomm badly. The European Commission has levied a fine of €997 Million, approximately $1.2 Billion, against U.S. chipmaker Qualcomm Inc. for violating antitrust laws in a series of deals with Apple by "abusing its market dominance in LTE baseband chipsets." According...

Buffer overflow

Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713...