CVE-2018-3566

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overwrite may occur in ProcSetReqInternal due to missing length check...

CVE-2018-5826

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, due to a race condition, a Use After Free condition can occur in the WLAN driver...

CVE-2018-5823

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, improper buffer length validation in extscan hotlist event can lead to potential buffer overflow...

CVE-2018-5825

CVE-2018-5825 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels prior to the 2018-04-05 patch level. The kernel IPA driver contains a Use-After-Free condition in the IPA subsystem, as described in the NVD record. The vulnerability is rated with CV...

CVE-2017-14894

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in wmavdevstartresphandler, vdev id is received from firmware as part of WMIVDEVSTARTRESPEVENTID. This vdev id can be greater than max...

CVE-2017-18147

CVE-2017-18147 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds from CAF using the Linux kernel prior to the 2018-04-05 patch level. In MMCP, a downlink message is not properly validated, enabling potential network-based impact without authentication. CVSS metrics indi...

CVE-2018-3596

CVE-2018-3596 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds that use CAF Android with the Linux kernel versions prior to the 2018-04-05 patch level. The vulnerability stems from legacy code that remained vulnerable after migration, with the note that this legacy cod...

CVE-2017-15837

CVE-2017-15837 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds in CAF-derived Linux kernels prior to 2018-04-05. The issue is a missing NL80211_PKTPAT_OFFSET policy, which can cause a buffer over-read in nla_get_u32(). Impact is a partial confidentiality risk with no ...

CVE-2017-17764

In all Qualcomm products with Android releases from CAF using the Linux kernel, the numfailureinfo value from firmware is not properly validated in wmarxaggrfailureeventhandler so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow...

The vulnerability of the Qualcomm IPC operating system’s Android component, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm IPC operating system’s Android component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2017-11000

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...

Out-of-bounds

In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in cshow, due to compathwcapstr not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access...

CVE-2017-8247

In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to getpid being called more than once, however putpid being called only once in function...

CVE-2017-9720

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur...

DEBIAN-CVE-2017-9725

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...

CVE-2017-8280

In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch...

CVE-2017-11002

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to cause a service failure.

The vulnerability in all components of the Qualcomm Android operating system, from the CAF repository that uses Linux kernel, is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, is due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause breaches of the confidentiality,...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to trigger a race condition.

The vulnerability in all components of the Qualcomm Android operating system from the CAF repository, which uses Linux kernel, is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to trigger a race condition...