CVE-2017-14884: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "datalen" from the function WLANQCMBRMcProcessMsg, a buffer overflow may potentially occur in WLANFTMMcProcessMsg...

CVE-2017-15860: Access of Resource Using Incompatible Type

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur...

PT-2018-5990

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue arises when an access point sends a challenge text greater than 128 bytes. In this scenario, the host driver is...

PT-2018-6025

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: The issue arises from improper validation of the number of radio channels coming from firmware in the wma unified link radio...

Android Trusted Execution Environment Code Execution

The vulnerability of the message transmission interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm Storage Code Execution

The vulnerability of the Qualcomm Storage component in the Android operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm GNSS Code Execution

The vulnerability of the Qualcomm GNSS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Qualcomm IPC Android Code Execution

The vulnerability of the Qualcomm IPC operating system’s Android component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm GPS Code Execution

The vulnerability of the Qualcomm GPS operating system for Android relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Android Trusted Execution Environment Code Execution

The vulnerability of the message transfer interface Qualcomm Trusted Execution Environment, TEE in the Android operating system is related to improper checking of buffer sizes. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm GPS Code Execution

The vulnerability of the Qualcomm GPS operating system for Android exists due to insufficient checking of the value of the counter read from the file. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Qualcomm SafeSwitch Code Execution

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Android Qualcomm Graphics_Linux Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm GraphicsLinux is one of Qualcomm's Linux-based graphics components. An elevation of privilege vulnerability exists in Qualcomm GraphicsLinux in Android. An attacker c...

Google Android Qualcomm component 'wma_rx_aggr_failure_event_handler()' function elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm WLAN driver is a wireless driver. An elevation of privilege vulnerability exists in the 'wmarxaggrfailureeventhandler' function of Qualcomm WLAN in Android, which...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-05458)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm component WLan. An attacker can exploit this vulnerability to achieve elevation of privilege...

Google Android Qualcomm WLAN Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Qualcomm WLAN driver is a wireless driver. An elevation of privilege vulnerability exists in Qualcomm WLAN for Android, which stems from the program failing to properly...

Google Android Qualcomm WLAN component elevation of privilege vulnerability (CNVD-2018-03818)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, and Qualcomm WLAN is one of the wireless LAN components developed by Qualcomm. An elevation of privilege vulnerability exists in Qualcomm WLAN in Android, which stems from the program's...

Google Android Qualcomm Media framework component elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Media framework is one of the media development frameworks from Qualcomm. An elevation of privilege vulnerability exists in Qualcomm Media framework in Android. A...

Google Android Qualcomm WLAN Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. A remote code execution vulnerability exists in Qualcomm WLAN in Android. A remote attacker could exploit this vulnerability to execute...

Android Security Bulletin—February 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...