CVE-2017-14901

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCANL80211VENDORSUBCMDSETTXPOWERSCALE vendor command, in which attribute QCAWLANVENDORATTRTXPOWERSCALE contains fewer than 1 byte, a buffer overrun occurs...

CVE-2017-11049

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a video driver, a race condition exists which can potentially lead to a buffer overflow...

CVE-2017-14896

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation without a length field validation in the mobicore driver which can result in an undersize buffer allocation. Ultimately this can result in a kernel memory...

CVE-2017-14899

CVE-2017-14899 affects Android for MSM (CAF Linux kernel-based builds) and Qualcomm WLAN components; a buffer overrun occurs when the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB attribute contains fewer than 1 byte during processing of the vendor command, potentially enabling local impact...

CVE-2017-11033

Technical details about CVE-2017-11033 (affected components, root cause, exploitability, and fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2017-11045

CVE-2017-11045 affects the Android camera stack (Android for MSM / CAF Linux kernel) in the camera driver function, where a race condition can lead to a Use-After-Free. The vulnerability is localized and impacts components related to Qualcomm/Camera in affected Android builds; CVSS scores indicat...

CVE-2017-14898

CVE-2017-14898 affects Qualcomm WLAN in Android builds (Android for MSM, CAF/Linux kernel). The issue is a buffer overrun in QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE handling when QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE is less than 1 byte. Impact per sources includes high confidentiality, integrit...

CVE-2017-14905

CVE-2017-14905 affects Android on MSM (and related CAF/Linux-kernel-based builds) via a buffer over-read when handling a specially crafted cfg80211 vendor command in the wireless networking stack. The CNVD/CVE records describe this as information disclosure due to a buffer over-read, impacting Qu...

CVE-2017-14907

CVE-2017-14907 describes a cryptographic weakness in Android for MSM, Firefox OS for MSM, and QRD Android builds aligned with CAF Linux kernel, caused by a flaw in deriving the disk encryption key that reduces cryptographic strength. Publicly documented as a critical encryption bug affecting Qual...

CVE-2017-9710

CVE-2017-9710 is described as a buffer overflow in the IOCTL path used to send QMI NOTIFY REQ messages in Android for MSM, Firefox OS for MSM, and CAF Android builds using the Linux kernel. The root cause is that the IOCTL interface can be invoked from multiple contexts, enabling a buffer overflo...

CVE-2017-9718

Technical details for CVE-2017-9718 are not publicly available in the provided connected documents. The description mentions a race condition in a multimedia driver but does not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2017-9698

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/size values for a submission command could cause a math operation to overflow and could result in an access to arbitrary memory. The combined pointer will...

CVE-2017-9700

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer overwrite is possible in fwnamestore if image name is 64 characters...

CVE-2017-14896

The CVE affects Android devices using Qualcomm GUD mobicore driver (Android for MSM/CAF builds) where a memory allocation occurs without validating length, causing an undersized buffer and potential kernel memory overwrite. Root cause: missing length-field validation in the mobicore driver. Impac...

CVE-2017-14901

CVE-2017-14901 describes a buffer overrun in the Qualcomm WLAN driver within Android for MSM/CAF Linux kernel when handling QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE with a TXPOWER_SCALE attribute of fewer than 1 byte. Affected components include Android devices using CAF/Linux kernel implement...

CVE-2017-11045

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition exists which can lead to a Use After Free condition...

CVE-2017-11047

CVE-2017-11047 applies to Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel; the issue is in a graphics-driver ioctl handler where missing copy_from_user() calls can allow writes to kernel memory. Impact per CVSS indicates LOCAL access with LOW user interaction an...

CVE-2017-11042

CVE-2017-11042 affects Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernel, where ImsService and IQtiImsExt AIDL APIs lack access control. Root cause: insufficient access restrictions on these ImsService interfaces. Exploitation would be local (CVSS2/3 reflect LOCAL,...

CVE-2017-11016

CVE-2017-11016 affects Android on MSM/CAF/Linux kernel variants, specifically when memory allocation fails during create_cal_block in calibration handling, leaving stale pointers. Connected Android bulletin detail positions CVE-2017-11016 under Qualcomm components for Pixel/Nexus devices and clas...

CVE-2017-14903

CVE-2017-14903 describes a buffer over-read in SENDACTIONFRAME IOCTL processing on Android for MSM/CAF Linux kernel branches (Android devices using Qualcomm/CAF). The vulnerability stems from insufficient payload length handling (payload length