PT-2016-4991

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the msm ipc router bind control port function in the IPC router kernel module, which does not properly verify if a port is a client port. This allows attackers to potentially gain...

PT-2016-4997

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue allows attackers to gain privileges or cause a denial of service via a crafted application. This can be achieved by performing either an AUDIO EFFECTS WRITE or AUDIO EFFECTS READ operation. The...

PT-2016-4996

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the mishandling of the KGSL MEMFLAGS GPUREADONLY flag in the MSM graphics driver for the Linux kernel. This mishandling allows attackers to gain privileges by leveraging accidental...

PT-2016-3557

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description A use-after-free issue in the msm set crop function in the MSM-Camera driver allows attackers to gain privileges or cause a denial of service through memory corruption. This can be achieved by making a...

PT-2017-1933

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the msm ipc router close function in the ipc router component, which can cause a denial of service NULL pointer dereference or possibly have other unspecified impacts. This can be...

PT-2016-4995

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to an integer signedness error in the MSM QDSP6 audio driver. This error can be exploited by attackers to gain privileges or cause a denial of service, resulting in memory corruption...

PT-2016-2704

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is caused by a stack-based buffer overflow in the supply lm input write function of the MSM Thermal driver. This can be exploited by sending a large amount of data through the debugfs interface,...

PT-2016-4994

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue allows attackers to cause a denial of service or possibly have other impact via a crafted application. This is achieved by making an ioctl call specifying many commands, which can lead to a buffe...

PT-2016-2703

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c file in the MSM QDSP6 audio driver for the Linux kernel. It involves reading data beyond a specified buffer, which can be exploit...

PT-2016-4992

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to an integer signedness error in the MSM V4L2 video driver. This error can be exploited by attackers to gain privileges or cause a denial of service, resulting in array overflow and...

PT-2016-3503

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue concerns a function in the MSM-VFE31 driver that does not properly validate a certain id value. This allows attackers to potentially gain privileges or cause a denial of service, resulting in...

CVE-2014-4322

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or...

CVE-2014-4322

CVE-2014-4322 affects the Linux kernel 3.x QSEECOM driver. The qseecom.c ioctl logic does not validate certain offset, length, and base values, enabling a crafted application to escalate privileges or trigger memory corruption. Affected component: drivers/misc/qseecom.c in the QSEECOM driver used...

CVE-2014-4323

The mdpluthwupdate function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain start and length values within an ioctl call, which allows...

CVE-2013-2598

app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image load-destination header values that specify memory...

CVE-2013-2595

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, enables MSMCAMIOCTLSETMEMMAPINFO ioctl calls for an unrestricted mmap interface, which allows...

CVE-2013-2597

Stack-based buffer overflow in the acdbioctl function in audioacdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that...

Design/Logic Flaw

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, enables MSMCAMIOCTLSETMEMMAPINFO ioctl calls for an unrestricted mmap interface, which allows...

Stack overflow

Stack-based buffer overflow in the acdbioctl function in audioacdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that...

CVE-2013-2595

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, enables MSMCAMIOCTLSETMEMMAPINFO ioctl calls for an unrestricted mmap interface, which allows...