CVE-2017-14872

While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-15856

Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-3564

In the FastRPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails...

Buffer overflow

In wlanhddcfg80211vendorscan, a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Race condition

Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur...

Buffer overflow

If the seqlen is greater then CSRMAXRSCLEN, a buffer overflow in wlanhddcfg80211addkey may occur when copying keyRSC in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Buffer overflow

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 while flashing images...

Out-of-bounds

While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Design/Logic Flaw

In the ADSP RPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, an arbitrary kernel write can occur...

Buffer overflow

While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Integer overflow

Integer overflow can occur in msmpcmadspstreamcmdput function if the user supplied data "paramlength" goes beyond certain limit in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Code injection

In wlanhddcfg80211setprivacyibss in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a buffer over-read can potentially occur...

Buffer overflow

Buffer over-read may happen in wmaprocessutfevent due to improper buffer length validation before writing into parambuf-numwowpacketbuffer in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-18158

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 while flashing images...

Integer overflow

While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-15824

In Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, the function UpdateDeviceStatus writes a local stack buffer without initialization to flash memory using WriteToPartition which may potentially leak memory...

CVE-2018-5895

Buffer over-read may happen in wmaprocessutfevent due to improper buffer length validation before writing into parambuf-numwowpacketbuffer in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-18158

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 while flashing images...

CVE-2018-3569

CVE-2018-3569 is a Qualcomm WLAN Host vulnerability classified as Elevation of Privilege (EoP) and rated Critical in the 2018-06-05 Android patch set. The issue is a buffer over-read during certain firmware/wlan operations, exposed on CAF Android releases (Android for MSM, Firefox OS for MSM, QRD...

CVE-2018-5890

CVE-2018-5890 affects Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) where fdt_totalsize of the current device tree is reported as 0, bypassing a check for a valid device tree. Described impact: bypass of device-tree validation before patch level 2018-06-05. Patch level 201...