263 matches found
Buffer overflow
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when the pktlogconf tool gives a pktlog buffer of size less than the minimal possible source data size in the host driver, a buffer overflow can potentially occur...
Race condition
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while reading command registration table entries in diagdbgfsreadtable...
CVE-2017-11057
CVE-2017-11057 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel in compatibility mode. The vulnerability arises from flash_data handling in 64-bit userspace, where a userspace-provided address can lead to kernel memory disclosure or a fault. Impact is inf...
CVE-2017-11064
CVE-2017-11064 is a WLAN vulnerability affecting Android for MSM (and variants) where a buffer overread occurs while processing ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_pas...
CVE-2017-11062
CVE-2017-11062 describes a potential buffer overread in WLAN handling on Android/CAF/Linux kernel builds due to unvalidated attributes in __wlan_hdd_cfg80211_do_acs. Affected products include Android for MSM, Firefox OS for MSM, QRD Android, and CAF Linux kernel releases across Android versions. ...
CVE-2017-11051
CVE-2017-11051 affects Android for MSM and related CAF/Linux kernel builds. The root cause is that hb_params in __wlan_hdd_cfg80211_testmode is not zero-initialized, enabling an information-disclosure vulnerability. Impact is described as information disclosure with network attack vector; exploit...
CVE-2017-11060
CVE-2017-11060 is a buffer overread vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Linux kernels. The issue occurs during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST ven...
CVE-2017-11054
CVE-2017-11054 affects Android for MSM, Firefox OS for MSM, and QRD Android on CAF Linux kernels. The vulnerability is a buffer over-read triggered when processing a specially crafted cfg80211 vendor command, potentially impacting confidentiality (as per CVSS) and availability. Connected document...
CVE-2017-11067
CVE-2017-11067 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernels. The vulnerability stems from an improper address sanity check in the Athdiag procfs entry, which may allow an out-of-range pointer offset. This is a local issue with a low attacker profile ...
Stack overflow
In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...
Buffer overflow
In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...
CVE-2016-5860
In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...
Integer overflow
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...
CVE-2016-5859
In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow...
Out-of-bounds
In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...
CVE-2016-5862
CVE-2016-5862 affects Qualcomm-based Android for MSM codecs; the vulnerability arises when a codec control issued from userspace is cast to the container structure rather than the codec’s own structure. This type confusion can lead to a kernel crash and a subsequent device restart on affected Qua...
CVE-2016-5860
CVE-2016-5860 affects the Qualcomm sound/ audio driver stack on Android-based devices (Qualcomm MSM Android builds, Firefox OS for MSM, QRD Android). The issue occurs when a function is called with an excessively large length, triggering an integer overflow that leads to a heap buffer overflow. T...
CVE-2017-8243
A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file...
CVE-2016-5863
Technical details about CVE-2016-5863 are not provided in the supplied documents. Public references exist (NVD, Ubuntu, SUSE, Tenable, ENISA) but no vendor/product/version/patch info is included here. Monitor for updates.