CVE-2018-11919

Technical details (affected products, root cause, impact, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2018-11914

Technical details for CVE-2018-11914 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-11946: Undefined Security Weakness

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

CVE-2018-5909: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, buffer overflow occur may occur in display handlers due to lack of checking in buffer size before copying into it and will lead to memory corruption...

CVE-2018-11261: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, there is a possible Use-after-free issue in Media Codec process. Any application using codec service will be affected...

CVE-2018-11913: Incorrect Permission Assignment for Critical Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper configuration of dev nodes may lead to potential security issue...

CVE-2018-5861: Incorrect Type Conversion or Cast

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader...

CVE-2018-11907: Incorrect Permission Assignment for Critical Resource

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper access control can lead to device node and executable to be run from /firmware/ which presents a potential issue...

CVE-2018-11260: Integer Overflow or Wraparound

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing a fast Initial link setup FILS connection request, integer overflow may lead to a buffer overflow when the key length is zero...

CVE-2018-5910: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a memory corruption can occur in kernel due to improper check in callers count parameter in display handlers...

CVE-2018-5904: Use After Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while list traversal in LPM status driver for clean up, use after free vulnerability may occur...

CVE-2018-11911: Improper Privilege Management

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper configuration of script may lead to unprivileged access...

CVE-2018-11956: Undefined Security Weakness

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper mounting lead to device node and executable to be run from /dsp/ which presents a potential security issue...

CVE-2018-11995: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a partition name-check variable is not reset for every iteration which may cause improper termination in the META image...

PT-2018-10903

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to improper access control in Android releases that use the Linux...

CVE-2018-11823: Double Free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, freeing device memory in driver probe failure will result in double free issue in power module...

CVE-2018-11906: Incorrect Default Permissions

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, there is a security concern with default privileged access to ADB and debug-fs...

PT-2018-10901

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to improper access control in Android releases that use the Linux...

PT-2018-10917

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue concerns the UPnP daemon in Android releases, which should not be running by...

PT-2018-5314

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description An issue exists in the processing of the boot image header, where an out of bounds read...