Linux kernel memory leak vulnerability (CNVD-2019-41263)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the fastrpcdmabufattach function in drivers/misc/fastrpc.c in Linux kernel...

PT-2019-4211

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.9 Description The issue is related to a memory leak in the fastrpc dma buf attach function, which can cause a denial of service due to memory consumption. This can be triggered by causing dma get sgtable...

CVE-2019-2308

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...

Code injection

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...

CVE-2019-2308

CVE-2019-2308 is described across connected docs as a kernel-level issue where fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages (CID-20c40794eb85), enabling a local escalation path to the fastrpc/DSP subsystem. The Astra Linux e...

CVE-2019-2308

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...

PT-2019-16376

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Consumer IOT versions affected versions not specified Qualcomm Snapdragon Industrial IOT versions affected versions not specified Qualcomm Snapdragon Mobile...

CVE-2019-2308: Undefined Security Weakness

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...

Race condition

In the FastRPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails...

CVE-2018-3564

In the FastRPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails...

CVE-2018-3564

In the FastRPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails...

CVE-2018-3564

CVE-2018-3564 affects the FastRPC driver in CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The issue is a Use-After-Free when mapping on the remote processor fails, potentially impacting components such as DSP_Services. The description notes that thi...

PT-2018-16061

Name of the Vulnerable Software and Affected Versions Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 Description A Use After Free condition can occur in the FastRPC driver when mapping on the remote processo...

CVE-2018-3564: Use After Free

In the FastRPC driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a Use After Free condition can occur when mapping on the remote processor fails...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist...

CVE-2017-15848

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist...

CVE-2017-15848

CVE-2017-15848 affects Android for MSM (CAF builds) via the fastrpc kernel driver. A userspace-triggered buffer overflow in the fastrpc driver is the stated vulnerability, potentially enabling local impact with high CVSS2/3 scores (LOCAL, LOW/LOW privileges for CVSS2; LOCAL, LOW privileges, NONE ...

CVE-2017-15848: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the fastrpc kernel driver, a buffer overflow vulnerability from userspace may potentially exist...

PT-2018-6013

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: A buffer overflow vulnerability from userspace may potentially exist in the fastrpc...

ADSPRPC driver for the Linux kernel competitive conditions vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a Qualcomm chip product for the MSM program to support users in building Android-based platforms with other enhancements.ADSPRPC driver for the Linux kernel ADSPRPC driver for the Linux kernel is a communication driver for the Linux...