CVE-2018-12010

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region...

CVE-2018-13889

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Heap memory was accessed after it was freed...

CVE-2018-12011

Technical details about CVE-2018-12011 are not provided in the supplied documents; no exposed affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2018-11962

CVE-2018-11962 affects Qualcomm audio components. The issue is a Use-After-Free in the heap during loading of audio effects config in the audio effects factory. It is a local (LOCAL) vulnerability with low attack complexity and requires no user interaction, per CVSS data (AV:L, AC:L, PR:L, UI:N, ...

CVE-2018-12006

The CVE-2018-12006 entry applies to CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) that use the Linux kernel. Root cause: uninitialized padding in a display function. Impact: local attackers with no privileges may access leaked data (information disclosure). Exploitation ...

CVE-2018-13889

CVE-2018-13889 affects Android CAF kernel use-after-free in heap memory, leading to heap access after free in CAF-based Android releases (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability is tied to the Linux kernel portion used by CAF; the NVD entry shows a base score of 7.2 (...

CVE-2018-13893

CVE-2018-13893 affects Android platforms built on CAF Linux kernels, with the root cause described as out-of-bounds access when copying masks to userspace due to using an old value of the msg mask table count. The CVSS3 vector (LOCAL, LOW CIA/IIA, HIGH impact) indicates local access is required a...

CVE-2018-12014: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer...

MGASA-2019-0045 Updated wavpack packages fix security vulnerabilities

Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service CVE-2018-6767. It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cau...

Updated wavpack packages fix security vulnerabilities

Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service CVE-2018-6767. It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cau...

Debian DSA-4366-1 : vlc - security update

An integer underflow was discovered in the CAF demuxer of the VLC media player. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4366. The text itself is copyright C Software in the Public Interest, Inc...

[SECURITY] [DSA 4366-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4366-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2019 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-11988

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Un-trusted pointer de-reference issue by accessing a variable which is already freed...

CVE-2018-11987

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic...

CVE-2018-11986

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver...

CVE-2018-11964

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Exposing the hashed content in /etc/passwd may lead to security issue...

CVE-2018-11984

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver...

CVE-2018-11963

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver...

CVE-2018-11965

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Anyone can execute proptrigger.sh which will lead to change in properties...