CVE-2017-9687

CVE-2017-9687 involves a race between two concurrent threads/processes in Android for MSM (and related CAF/Linux kernel builds) where they can write the value "0" to a debugfs file that controls ipa ipc log. This can lead to a double-free in ipc_log_context_destroy() and a Use-After-Free when the...

PT-2017-19115

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a possible double free or use after free in the SPS driver when...

CVE-2017-9686: Double Free

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possible double free/use after free in the SPS driver when debugfs logging is used...

CVE-2017-9687: Double Free

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipclogcontextdestroy. Another issue is th...

CVE-2017-10997

In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory...

Memory corruption

In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory...

CVE-2017-10997

CVE-2017-10997 affects Qualcomm PCIe (PCI driver) in CAF Android builds. The root cause is a write to a PCIe register via a debugfs node that can corrupt kernel memory, as described for all Qualcomm products with CAF Linux kernels. The vulnerability detail specifies the component as the PCI drive...

CVE-2017-10997: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory...

PT-2017-11671

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue concerns corruption of kernel memory due to a write to a PCIe register using a debugfs node. Recommendations At the...

PT-2018-6786

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue allows local users to cause a denial of service, specifically infinite recursion, under certain circumstances. This can be achieved by writing to a file under /sys/kernel/debug, and a...

Google Android - pm_qos KASLR Bypass Vulnerability

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=971 The "pmqos" module exposes an interface to kernel space for specifying QoS dependencies. In order to aid in debugging this interface, the module exposes a "debugfs" interface,...

Google Android - pm_qos KASLR Bypass

Google Android - pmqos KASLR Bypass Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=971 The "pmqos" module exposes an interface to kernel space for specifying QoS dependencies. In order to aid in debugging this interface, the module exposes a "debugfs" interface, available under...

Linux kernel DoS

The vulnerability of the supplylminputwrite function in the drivers/thermal/supplylmcore.c file of the MSM Thermal kernel driver for the Linux operating system is caused by buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a system failure or other adverse...

CVE-2016-2063

Stack-based buffer overflow in the supplylminputwrite function in drivers/thermal/supplylmcore.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service o...

Stack overflow

Stack-based buffer overflow in the supplylminputwrite function in drivers/thermal/supplylmcore.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service o...

UBUNTU-CVE-2016-2063

Stack-based buffer overflow in the supplylminputwrite function in drivers/thermal/supplylmcore.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service o...

CVE-2016-2063

Stack-based buffer overflow in the supplylminputwrite function in drivers/thermal/supplylmcore.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service o...

CVE-2016-2063

Stack-based buffer overflow in the supplylminputwrite function in drivers/thermal/supplylmcore.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service o...

CVE-2016-2063: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the supplylminputwrite function in drivers/thermal/supplylmcore.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service o...

Android Qualcomm component lifting vulnerability (CNVD-2016-04851)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...