EUVD-2017-2710

Malware in sbrugna...

Android Qualcomm qcacld Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handheld Alliance OHA.Qualcomm qcacld-2.0 is one of the wireless LAN drivers. Qualcomm qcacld-2.0 is one of the wireless LAN drivers. An...

CVE-2017-9694

While parsing Netlink attributes in QCAWLANVENDORATTREXTSCANBSSIDHOTLISTPARAMSLOSTAPSAMPLESIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur...

Buffer overflow

While parsing Netlink attributes in QCAWLANVENDORATTREXTSCANBSSIDHOTLISTPARAMSLOSTAPSAMPLESIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur...

CVE-2017-9694

CVE-2017-9694 affects the Qualcomm QCACLD-2.0 WLAN driver and concerns an issue in parsing Netlink attributes: specifically, the QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE parameter. The root cause is a buffer overread during parsing, which could occur before 2017-05-16...

PT-2018-8527

Name of the Vulnerable Software and Affected Versions qcacld versions prior to 2017-05-16 Description A buffer overread issue occurs while parsing Netlink attributes in QCA WLAN VENDOR ATTR EXTSCAN BSSID HOTLIST PARAMS LOST AP SAMPLE SIZE. Recommendations For versions prior to 2017-05-16, update ...

CVE-2017-9694: Improper Restriction of Operations within the Bounds of a Memory Buffer

While parsing Netlink attributes in QCAWLANVENDORATTREXTSCANBSSIDHOTLISTPARAMSLOSTAPSAMPLESIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur...

CVE-2017-11073

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qcacld pktlog allows mapping memory via /proc/athpktlog/cld to user space...

Code injection

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qcacld pktlog allows mapping memory via /proc/athpktlog/cld to user space...

CVE-2017-11073

CVE-2017-11073 is a Qualcomm Networking subsystem vulnerability affecting Android on MSM/CAF/Linux kernel builds. The qcacld pktlog allows a local attacker to map memory to user space via /proc/ath_pktlog/cld, enabling potentially exposure or modification of memory. Public details specify LOCAL a...

PT-2017-11730

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue allows mapping memory via /proc/ath pktlog/cld to user space, potentially...

CVE-2017-11073: Undefined Security Weakness

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qcacld pktlog allows mapping memory via /proc/athpktlog/cld to user space...