CVE-2017-9706: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an array out-of-bounds access can potentially occur in a display driver...

CVE-2017-11060: Out-of-bounds Read

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACANL80211VENDORSUBCMDEXTSCANPNOSETPASSPOINTLIST and QCANL80211VENDORSUBCMDEXTSCANPNOSETLIST cfg80211 vendor commands in...

CVE-2017-11062: Out-of-bounds Read

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently attributes are not validated in wlanhddcfg80211doacs which can potentially lead to a buffer overread...

PT-2017-11717

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A buffer over-read issue can occur when processing a specially crafted cfg80211 vendor...

PT-2017-11726

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to the lack of validation of attributes ...

PT-2017-11715

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer over-read issue occurs when processing a specially...

CVE-2017-9714

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an out of bound memory access may happen in limCheckRxRSNIeMatch in case incorrect RSNIE is received from the client in assoc request...

PT-2017-3616

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected versions not specified Description: The issue is related to t...

PT-2017-3618

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3416

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

PT-2017-3417

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Android versions prior to the fixed version QRD Android versions prior to the fixed version Description The issue is related to insufficient input validation in the message passing interface ...

PT-2017-3599

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...

Stack overflow

In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow...

Buffer overflow

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

Heap overflow

In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow...

Integer overflow

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...

Out-of-bounds

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

CVE-2016-5859

In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow...

CVE-2016-5860

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow...

CVE-2016-5864

In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound...