Android WLAN Heap Buffer Overflow RCE

The vulnerability of the wmasendbcnbufll function in the Android WLAN operating system component from the CAF repository is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process,...

Android wireless network driver Heap Buffer Overflow DoS

The vulnerability of the Android wireless network driver from the CAF repository is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Android WLAN Heap Buffer Overflow DoS

The vulnerability of the wmanlomatchevthandler function in the Android WLAN operating system from the CAF repository is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

Android WLAN Component Code Execution

The vulnerability of the wmaunifiedbcntxstatuseventhandler function in the Android WLAN operating system from the CAF repository involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged proces...

Android CAF Integer Overflow Memory Buffer Overflow

The vulnerability of the Android operating system from the CAF repository is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to trigger a memory buffer overflow...

Android loader Data Compromise

The vulnerability of the Android operating system’s loader from the CAF repository is related to insufficient checks on the sizes of headers in compressed load images. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protect...

PT-2018-1123

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to an integer overflow in the Android operating system from the CAF repository. This can be exploited by a remote attacker to cause a buffer overflow in memory...

QBT1000 driver Buffer Overflow

The vulnerability of the ioctl function in QBT1000 drivers in Android operating systems, for MSM, Firefox OS for MSM, QRD Android, and Android from the CAF repository, is related to deficiencies in buffer size checking. Exploiting this vulnerability can allow a local attacker to trigger buffer...

Android WLAN Kernel Component Code Execution

The vulnerability of the WLAN kernel component of the Android operating system, found in the CAF repository, is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process, using a specially crafted file...

UnpackCore Kernel Code Execution

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...

Android USB Driver Memory Access

The vulnerability of the Android operating system’s USB driver from the CAF repository stems from synchronization errors when using a shared resource during a race condition. Exploiting this vulnerability allows a remote attacker to access memory after it has been freed...

Android SAF IOCTL Overflow

The vulnerability of the Android operating system’s IOCTL handler from the CAF repository arises due to synchronization errors when using a shared resource during a race condition. Exploiting this vulnerability can allow an attacker to trigger a full memory overflow and write beyond the memory...

Linux kernel Android CAF Heap Buffer Overflow DoS

The vulnerability of the Linux operating system Android’s kernel from the CAF repository is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to improperly control the data transfer process by disabling the validation mechanisms...

Android CAF Repository Data Compromise

The vulnerability of the Android operating system from the CAF repository is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of incoming 3G NAS messages...

CAF DRM Component Data Compromise

The vulnerability of the DRM component of digital television and radio operating systems in the CAF repository arises from reading beyond the memory buffer boundaries. Exploitation of this vulnerability could allow a malicious actor to compromise privacy, integrity, and accessibility of the syste...

Android CAF Data Encryption

The vulnerability of the Android operating system from the CAF repository is related to insufficiently robust data encryption. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information, as insecure algorithms we...

PlayReady DRM Android Component Data Compromise

The vulnerability of PlayReady DRM on the Android operating system, found in the CAF repository, is related to the lack of checks for buffer size. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

Android GNSS Component Data Compromise

The vulnerability of the Android operating system’s GNSS component from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information during...

SIP Component Buffer Overflow

The vulnerability of the SIP component of the Android operating system from the CAF repository is related to shortcomings in string processing the absence of a zero-terminated string. Exploiting this vulnerability can allow an attacker, acting remotely, to cause buffer overflows...

RFA-1x Component Privilege Escalation

The vulnerability of the RFA-1x component of the Android operating system from the CAF repository arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise privacy, integrity, and accessibility...