CVE-2017-15817: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure...

PT-2018-5990

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue arises when an access point sends a challenge text greater than 128 bytes. In this scenario, the host driver is...

PT-2018-5738

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: A buffer overflow may potentially occur due to the lack of bounds checking on the variable data len from the function WLANQCM...

CVE-2017-17765: Integer Overflow or Wraparound

In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wmagetllstatsextbuf and are used to allocate the sizes of buffers and may be vulnerable to integer overflow leading to buffer overflow...

CVE-2017-15820: Use After Free

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur...

CVE-2017-17764: Integer Overflow or Wraparound

In all Qualcomm products with Android releases from CAF using the Linux kernel, the numfailureinfo value from firmware is not properly validated in wmarxaggrfailureeventhandler so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow...

CVE-2017-15862: Integer Overflow or Wraparound

In all Qualcomm products with Android releases from CAF using the Linux kernel, in wmaunifiedlinkradiostatseventhandler, the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow...

CVE-2017-14884: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "datalen" from the function WLANQCMBRMcProcessMsg, a buffer overflow may potentially occur in WLANFTMMcProcessMsg...

CVE-2017-15860: Access of Resource Using Incompatible Type

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur...

PT-2018-5992

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: A Use After Free Condition can potentially occur in a KGSL IOCTL handler. Recommendations: At the moment, there is no...

CVE-2017-17767: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer...

CVE-2017-15861: Improper Validation of Array Index

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wmaroamsyncheventhandler, vdevid is received from firmware and used to access an array without validation...

PT-2018-6566

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue arises from the improper validation of the num failure info value from firmware in the wma rx aggr failure event...

PT-2018-6023

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: A stack buffer overflow may potentially occur in Qualcomm products with Android releases from CAF using the Linux kernel when...

PT-2018-6569

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue concerns the IL client in Qualcomm products, which may free a buffer used by the OMX Video Encoder Component and th...

CVE-2017-15829: Concurrent Execution using Shared Resource with Improper Synchronization

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition...

PT-2018-6024

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue concerns the function wma roam synch event handler where the vdev id received from firmware is used to access an...

PT-2018-6025

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue arises from improper validation of the number of radio channels coming from firmware in the wma unified link radio...

Android Trusted Execution Environment Code Execution

The vulnerability of the message transmission interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm GNSS Code Execution

The vulnerability of the Qualcomm GNSS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...