CVE-2017-10997

CVE-2017-10997 affects Qualcomm PCIe (PCI driver) in CAF Android builds. The root cause is a write to a PCIe register via a debugfs node that can corrupt kernel memory, as described for all Qualcomm products with CAF Linux kernels. The vulnerability detail specifies the component as the PCI drive...

CVE-2017-11040

CVE-2017-11040: Information disclosure in Qualcomm CAF Android releases using the Linux kernel. Reading from sysfs nodes may expose more information than allowed, enabling partial confidentiality loss (CVSS2: 4.3; CVSS3: 5.5). Affected: Qualcomm products with CAF Android builds on Linux kernel; i...

CVE-2017-11041

CVE-2017-11041 affects Qualcomm LibOmxVenc in Android CAF/Linux-kernel builds. The issue is listed as a remote-code-execution vulnerability (RCE) with Critical severity, arising from a buffer-management flaw that could allow exploitation via a specially crafted file. Android security bulletins fl...

CVE-2017-8280

CVE-2017-8280 affects Qualcomm WLAN driver in Android CAF builds using the Linux kernel. The issue arises during the wlan calibration data store/retrieve operation, where a race condition can lead to a memory leak and a buffer overflow during context switches. In scope here are Qualcomm products ...

CVE-2017-8281

CVE-2017-8281 is reported as a race condition in Qualcomm CAF Android builds using the Linux kernel, affecting the DCI driver and allowing access to memory that has already been freed during event status queries. Connected sources identify the affected component as the DCI driver in Qualcomm auto...

CVE-2017-8247

CVE-2017-8247 affects Qualcomm camera driver components in Android CAF builds using the Linux kernel. Description: when more than one thread opens the device, the device may be opened multiple times, causing get_pid to be called more than once while put_pid is called only once in msm_close. Impac...

CVE-2017-9724

CVE-2017-9724 affects Qualcomm products running CAF Android builds with the Linux kernel. The root cause is in the ION cache maintenance code, where kernel memory could be written from a user-supplied address due to user-level permissions. This allows a local attacker to Access kernel memory (loc...

CVE-2017-10996

In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in cshow, due to compathwcapstr not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access...

CVE-2017-8251

In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msmispcheckstreamcfgcmd & msmispstatsupdatecgcoverride, 'streamcfgcmd-numstreams' is not checked, and could overflow the array streamcfgcmd-streamhandle...

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, is due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause breaches of the confidentiality,...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to trigger a race condition.

The vulnerability in all components of the Qualcomm Android operating system from the CAF repository, which uses Linux kernel, is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to trigger a race condition...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to cause a service failure.

The vulnerability in all components of the Qualcomm Android operating system, from the CAF repository that uses Linux kernel, is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Google Android Qualcomm Camera Driver Remote Code Execution Vulnerability (CNVD-2017-31667)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Camera driver is a camera driver developed by Qualcomm. A remote code execution vulnerability exists in the Qualcomm Camera driver in Android. A remote attacker c...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31664)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code execution vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit thi...

Google Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Wi-Fi Driver is a wireless driver component. An information disclosure vulnerability exists in the Qualcomm Wi-Fi Driver in Android. An attacker can exploit this...

Google Android Qualcomm Camera Driver Remote Code Execution Vulnerability (CNVD-2017-31668)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Camera driver is a camera driver developed by Qualcomm. A remote code execution vulnerability exists in the Qualcomm Camera driver in Android. A remote attacker c...

Google Android Qualcomm Video Driver Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Video driver is a video driver developed by Qualcomm. A remote code execution vulnerability exists in the Qualcomm Video driver in Android. A remote attacker can exploit this...

Google Android Qualcomm Audio driver remote code execution vulnerability (CNVD-2017-31648)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Audio driver is an audio driver component. A remote code vulnerability exists in the Qualcomm Audio driver in Android. A remote attacker can exploit this...

Google Android Qualcomm File System Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm File System is a Qualcomm file system used in it. An information disclosure vulnerability exists in the Qualcomm File System in Android. An attacker could exploit this...

Google Android Qualcomm PCI Driver Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Camera driver is a camera driver developed by Qualcomm. A remote code execution vulnerability exists in the Qualcomm Camera driver in Android. A remote attacker c...