162 matches found
CVE-2018-11889
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, when requesting rssi timeout, access invalid memory may occur since local variable 'context' stack data of wlan function is free...
CVE-2018-11889
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, when requesting rssi timeout, access invalid memory may occur since local variable 'context' stack data of wlan function is free...
CVE-2018-11886
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check while calculating the MPDU data length will cause an integer overflow and then to buffer overflow in WLAN function...
CVE-2018-11895
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame...
CVE-2018-11886
CVE-2018-11886 affects Qualcomm WLAN host in Android CAF/linux-kernel WLAN stack. Root cause: missing validation when calculating MPDU data length leads to an integer overflow, then a buffer overflow in the WLAN function. Impact per sources is consistent with local, low-privilege exploitation and...
CVE-2018-11883: Improper Validation of Array Index
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, in policy mgr unit test if mode parameter in wlan function is given an out of bound value it can cause an out of bound access while accessing the PCL table...
CVE-2018-11886: Integer Overflow or Wraparound
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check while calculating the MPDU data length will cause an integer overflow and then to buffer overflow in WLAN function...
CVE-2018-11895: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame...
PT-2018-10879
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a possibility of invalid memory access while processing a driver command in the WLAN function. This affects Android releases, including Android for MSM, Firefox OS for...
PT-2018-10892
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an improper length check validation in the WLAN function, which can cause the driver to write default RSN capabilities to memory not allocated to the frame. This...
PT-2018-10886
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is caused by a lack of check while calculating the MPDU data length, resulting in an integer overflow and subsequently a buffer overflow in the WLAN function. This affects all...
PT-2018-10884
Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue occurs when the mode parameter in the wlan function is given an out of bound...
CVE-2018-11878: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, possibility of invalid memory access while processing driver command in WLAN function...
CVE-2018-11300
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan function and may result in to a "Use after free" scenario...
Out-of-bounds
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function...
Design/Logic Flaw
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan function and may result in to a "Use after free" scenario...
CVE-2018-11300
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan function and may result in to a "Use after free" scenario...
CVE-2018-11836: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function...
CVE-2018-11300: Use After Free
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan function and may result in to a "Use after free" scenario...