CVE-2018-5860

CVE-2018-5860 affects the MDSS (multimedia display) driver in Android builds for MSM, Firefox OS for MSM, and QRD Android, provided by CAF on Linux-based kernels. The root cause is that a data structure may be used without proper initialization, as described in multiple sources. According to the ...

CVE-2017-18169

User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2017-18169

Technical details about CVE-2017-18169 (affected products, root cause, impact, fixes) are not provided in the connected documents; sources only note a kernel denial-of-service in ashmem during cache maintenance. Monitor for updates.

CVE-2017-18169

User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5854

A stack-based buffer overflow can occur in fastboot from all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5857

In CVE-2018-5857, the issue is a Use-After-Free in the WCD CPE codec used by CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel. The root cause is a memory management defect in wcd_cpe_core that can be triggered locally. The CVSS metrics indicate a Local ...

CVE-2018-5854

A stack-based buffer overflow can occur in fastboot from all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5863: Improper Restriction of Operations within the Bounds of a Memory Buffer

If userspace provides a too-large WPA RSN IE length in wlanhddcfg80211setie, a buffer overflow occurs in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2017-18169: Reachable Assertion

User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel...

CVE-2018-5849

Due to a race condition in the QTEECOM driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur...

CVE-2018-5851

Buffer over flow can occur while processing a HTTT2HMSGTYPETXCOMPLIND message with an out-of-range nummsdus value in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

Buffer overflow

While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

Input validation

In the function wmapdevdivinfoevthandler in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, there is no upper bound check on the value event-numchainsvalid received from firmware which can lead to a buffer overwrite of the fixed size...

Design/Logic Flaw

In the video driver function setoutputbuffers, binfo can be accessed after being freed in a failure scenario in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

Buffer overflow

Buffer over flow can occur while processing a HTTT2HMSGTYPETXCOMPLIND message with an out-of-range nummsdus value in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

Design/Logic Flaw

Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

Out-of-bounds

In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2017-15842

Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2017-15843

Due to a race condition in a bus driver, a double free in msmbusfloorvotecontext can potentially occur in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2017-15857

In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...