513 matches found
Android Security Bulletin—November 2017Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2017-11-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners were...
Out-of-bounds
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur...
CVE-2017-11046
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur...
CVE-2017-11046
CVE-2017-11046 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The issue arises when an audio driver ioctl handler is invoked, potentially triggering a kernel out-of-bounds write. Publicly available details in the connected sources reiterate the same r...
Google Android Qualcomm Audio Driver Elevation of Privilege Vulnerability
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm audio driver, which can be exploited by an attacker to gain elevated privileges kernel...
CVE-2017-8278
In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur...
Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31664)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code execution vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit thi...
Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31648)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit this...
Google Android Qualcomm Audio Driver Remote Code Execution Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code execution vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit thi...
The vulnerability of the audio driver of the mobile application MSM for the Android operating system allows a hacker to trigger a stack overflow.
The vulnerability of the Android mobile application’s audio driver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to select certain values in the user’s environment, which may lead to stack overflow...
The vulnerability of the audio driver of the mobile application MSM for the Android operating system allows a hacker to trigger a memory overflow in the buffer dynamic area.
The vulnerability of the Android mobile application’s audio driver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a numerical overflow, followed by an overflow of the dynamic memory buffer. This occurs if the function name is too long...
The vulnerability of the audio driver function of the mobile application MSM for the Android operating system allows a hacker to trigger buffer overflows.
The vulnerability of the audio driver function in the Android mobile application MSM is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full memory overflow, followed by a buffer overflow, if large values of certain variables are set ...
The vulnerability of the Android CAF-release operating system’s audio driver allows a hacker to execute arbitrary code.
The vulnerability of the Android CAF-release operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to continue executing code even if the check for valid length values fails and an error message is...
The vulnerability of the audio driver of the MSM mobile application for the Android operating system allows a hacker to trigger buffer overflows.
The vulnerability of the audio driver in the MSM mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full overflow, followed by a buffer overflow, if the function name is long...
Code injection
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...
Integer overflow
In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...
Integer overflow
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...
CVE-2016-5860
In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...
CVE-2016-5853
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value...