PT-2017-2697

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A buffer overflow issue exists when performing WCDMA radio tuning, potentially allowing a remote attacker to compromise...

PT-2017-2700

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the front end of Qualcomm products with Android releases from CAF using t...

PT-2017-2704

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a component in the Android operating system, specifically in the SIP from the CAF repository. It involves inadequate handling of string variables, notably the lack of...

PT-2017-2717

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by a buffer overflow in the UIMDIAG interface of the Android operating system from the CAF repository. This can allow a remote attacker to impact the confidentiality,...

PT-2017-2691

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A vulnerability exists in the GNSS component of the Android operating system from the CAF repository, related to insufficient...

PT-2017-2702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a buffer overflow in the Linux kernel of the Android operating system from the CAF repository. It occurs due to an incorrect length being used to clear a memory...

PT-2017-2696

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A buffer overflow issue exists when processing a QMI message, potentially allowing a remote attacker to compromise...

PT-2017-2716

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to the GPS client in Android operating systems from the CAF repository, which uses insecure cryptographic...

CVE-2016-10238

In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue...

CVE-2016-10242

A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel...

CVE-2014-9934

A PKCS1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding...

CVE-2014-9932

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation...

CVE-2014-9933

Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access...

CVE-2014-9937

In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

CVE-2014-9931

A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value...

CVE-2014-9935

In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel...

CVE-2015-8997

In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel...

CVE-2015-9001

In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel...

CVE-2015-9003

In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel...

CVE-2016-10237

If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application TA in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory...