12335 matches found
CVE-2017-10996
In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in cshow, due to compathwcapstr not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access...
CVE-2017-10997
In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory...
CVE-2017-8251
In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msmispcheckstreamcfgcmd & msmispstatsupdatecgcoverride, 'streamcfgcmd-numstreams' is not checked, and could overflow the array streamcfgcmd-streamhandle...
CVE-2017-8277
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msmdbaregisterclient, if the client registers failed, it would be freed. However the client was not removed from list. Use-after-free would occur when traversing the list next time...
CVE-2017-9676
In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock...
CVE-2017-9720
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur...
CVE-2017-11002
In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur...
CVE-2017-11040
In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to...
CVE-2017-11041
In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in another...
CVE-2017-9724
In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address...
CVE-2017-9725
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...
DEBIAN-CVE-2017-9725
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...
CVE-2017-8278
CVE-2017-8278 affects Qualcomm Audio driver in Android CAF builds (Linux kernel). Description across sources indicates an overflow in audio data handling (buffer/integer overflow) that could enable Elevation of Privilege via the Qualcomm audio stack. The CVE is listed under Qualcomm components wi...
CVE-2017-8250
In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nrcmds" and "nrbos" number are passed across functions without any check. An integer overflow to buffer overflow with a smaller buffer allocated may occur when they are too large or negative...
CVE-2017-11000
In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...
CVE-2017-11002
In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur...
CVE-2017-11040
In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to...
CVE-2017-8247
In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to getpid being called more than once, however putpid being called only once in function...
CVE-2017-8251
In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msmispcheckstreamcfgcmd & msmispstatsupdatecgcoverride, 'streamcfgcmd-numstreams' is not checked, and could overflow the array streamcfgcmd-streamhandle...