CVE-2017-18158

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 while flashing images...

CVE-2018-5895

CVE-2018-5895 affects Qualcomm qcacld, specifically the wma_process_utf_event() path in Android on Google Pixel/Nexus devices prior to the 2018-06-05 patch level. The issue is a buffer over-read caused by improper buffer length validation when writing into param_buf->num_wow_packet_buffer, lea...

CVE-2018-5889

CVE-2018-5889 affects Qualcomm bootloader components. The connected records classify it as a Local Elevation of Privilege (EoP) vulnerability in the bootloader, with a moderate severity. The issue is described as a buffer overflow occurring in Android releases from CAF when processing a compresse...

CVE-2017-15824

In Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, the function UpdateDeviceStatus writes a local stack buffer without initialization to flash memory using WriteToPartition which may potentially leak memory...

CVE-2017-15856

CVE-2017-15856 affects Android releases from CAF using the Linux kernel, due to a race condition when processing the power_stats debug file that can cause a double-free. This yields elevation of privilege on local access. The issue involves the Qualcomm power_stats debugfs node; patches tied to t...

CVE-2018-5888

While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-14872

While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-15824

CVE-2017-15824 affects Android CAF-based builds (Android for MSM, Firefox OS for MSM, QRD Android) prior to 2018-06-05. Root cause: UpdateDeviceStatus() writes an uninitialized local stack buffer to flash via WriteToPartition(), enabling a potential memory leak and information disclosure. Impact ...

CVE-2018-3597

In the ADSP RPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, an arbitrary kernel write can occur...

NULL pointer dereference in ModuleState::setup, in ModuleState.cpp

There exists one NULL pointer dereference bug in ModuleState::se...

CVE-2018-5897: Out-of-bounds Read

While reading the data from buffer in dciprocessctrlstatus there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-11304: Integer Overflow or Wraparound

Possible buffer overflow in msmadspstreamcallbackput due to lack of input validation of user-provided data that leads to integer overflow in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5830: Improper Restriction of Operations within the Bounds of a Memory Buffer

While processing the HTTT2HMSGTYPEMGMTTXCOMPLIND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-3597: Improper Input Validation

In the ADSP RPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, an arbitrary kernel write can occur...

PT-2018-17199

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to security patch level 2018-07-05 Description: A buffer over-read and information leak can potentially occur while processing a WMI APFIND event in Android releases from CAF using the Linux kernel. Recommendations...

PT-2018-16061

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 Description A Use After Free condition can occur in the FastRPC driver when mapping on the remote processo...

PT-2018-17197

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-07-05 Description: A buffer overwrite can potentially occur in the wlan hdd cfg80211 vendor scan function when SCAN SSIDS and QCA WLAN VENDOR ATTR SCAN FREQUENCIES are parsed. This issue...

PT-2018-17223

Name of the Vulnerable Software and Affected Versions: Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 Description: A buffer over-read issue may occur due to improper buffer length validation in the wma proce...

PT-2018-16081

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android versions prior to security patch level 2018-06-05 Description The issue allows for an arbitrary kernel write to occur in the ADSP RPC driver...

CVE-2018-5890: Undefined Security Weakness

If the fdttotalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...