CVE-2017-9690

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow...

CVE-2017-11012

The CVE-2017-11012 issue is described across multiple sources as a stack-based buffer overflow in Qualcomm WLAN components used by Android on MSM platforms, triggered by processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 vendor command. Connected CNVD entry attribut...

CVE-2017-11024

CVE-2017-11024 describes a race condition in the rmnet USB control driver within Android/CAF Linux-kernel based builds on MSM platforms, which can lead to a Use-After-Free condition. Affected: Android MSM, Firefox OS for MSM, and QRD Android releases using CAF Linux kernel. Impact is described as...

CVE-2017-11026

CVE-2017-11026 affects Android on Qualcomm MSM devices with CAF Linux kernel during FRP partition flashing. Descriptions in NVD/CNVD indicate an authentication flaw where the authentication method can be compromised for static keys when flashing the FRP partition using a reference FRP unlock. Thi...

CVE-2017-11029

The CVE-2017-11029 issue is a Qualcomm Camera elevation vulnerability in Android on MSM devices. The vulnerability stems from the Camera CPP module Linux driver directly accessing a user-space buffer, with an unchecked ioctl_ptr->len used to copy data into a kernel buffer, enabling kernel memo...

CVE-2017-11035

CVE-2017-11035 affects Qualcomm WLAN in Android devices (notably Pixel/Nexus) with a buffer overflow/information leak caused by incorrect initialization of WEXT callbacks and missing buffer-size checks. The vulnerability enables EoP via the WLAN path and is tracked as a Qualcomm WLAN issue in the...

CVE-2017-11058

CVE-2017-11058 affects Android on MSM/Qualcomm WLAN (cfg80211 vendor command handling). The issue is a buffer over-read in the WLAN driver, prompting potential information disclosure (confidentiality impact). Affected firmware, per Pixel/Nexus security bulletin, was addressed by the 2017-11-05 pa...

CVE-2017-11073

CVE-2017-11073 is a Qualcomm Networking subsystem vulnerability affecting Android on MSM/CAF/Linux kernel builds. The qcacld pktlog allows a local attacker to map memory to user space via /proc/ath_pktlog/cld, enabling potentially exposure or modification of memory. Public details specify LOCAL a...

CVE-2017-11085

CVE-2017-11085 affects Android on MSM platforms (CAF Linux kernel lineage) and is tied to the Qualcomm audio driver component msm-audio-effects-q6-v2.c. The root cause is an integer overflow in msm_audio_effects_virtualizer_handler that leads to a buffer overflow. This could enable memory corrupt...

CVE-2017-9696

CVE-2017-9696 involves a buffer over-read in the Qualcomm MSM camera driver (msm_isp_stop_stats_stream) affecting Android variants built for MSM, Firefox OS for MSM, and QRD Android with CAF Linux kernels. The problem stems from not validating userspace-supplied stream_cfg_cmd->num_streams aga...

CVE-2017-9702

CVE-2017-9702 describes a vulnerability in Android variants (MSM, CAF Linux kernels) where a user-space pointer is directly accessed in a camera driver. This is a local, low-attack-surface issue with a high impact on confidentiality, integrity, and availability (per CVSS3; base score 7.8) and is ...

CVE-2017-9721

CVE-2017-9721 describes a buffer overflow in the boot loader when parsing the splash image, affecting Android on MSM (and related CAF-based builds) and related Qualcomm components. The entry notes the vulnerability arises in the splash image parsing path in the boot loader, with CVSS details indi...

CVE-2017-11013

CVE-2017-11013 is a Qualcomm WLAN/Android kernel vulnerability where countOffset in UnpackCore increments per loop without bounds checking pIe->arraybound. Documented as a Remote Code Execution in the Qualcomm WLAN driver affecting CAF Android kernel builds; exploitation could occur via crafte...

CVE-2017-8279

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition protection while updating msg mask table can lead to buffer over-read. Also access to freed memory can happen while updating msgmask information...

CVE-2017-11089

CVE-2017-11089: A buffer overread in nl80211_set_station occurs when a user-space app sends NL80211_ATTR_LOCAL_MESH_POWER_MODE with data smaller than 4 bytes. Affected: Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel. Root cause and exact vendor-specific fixes a...

CVE-2017-9701

Technical details about CVE-2017-9701 are not publicly available in the provided connected documents; the information comes from the initial description only. Monitor for updates.

CVE-2017-11014

CVE-2017-11014 describes a buffer overflow in the Android/CAF/Linux kernel stack when parsing a Measurement Request IE in a Roam Neighbor Action Report. Affected products include Android for MSM, Firefox OS for MSM, and QRD Android with CAF Linux kernel releases. The CVSS data indicates high impa...

CVE-2017-11038

CVE-2017-11038 is a Qualcomm memory-subsystem Elevation of Privilege flaw affecting Android on MSM devices (and CAF-based kernels) where, during boot image header processing, range checks can be bypassed by supplying different header versions. This enables possible local privilege escalation. The...

CVE-2017-11027

CVE-2017-11027 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel; the vulnerability arises when flashing a UBI image, where the size is not validated against the minimum header size, leading to uninitialized data access. The NVD entry characterizes impact ...

CVE-2017-11017

CVE-2017-11017 affects Android builds for MSM (including CAF-derived kernel variants) and related Android forks (Firefox OS for MSM, QRD Android). The issue arises when flashing a specially crafted UBI image, causing memory corruption or access to uninitialized memory in the Linux kernel used by ...