CVE-2017-11000: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...

CVE-2017-8251: Improper Validation of Array Index

In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msmispcheckstreamcfgcmd & msmispstatsupdatecgcoverride, 'streamcfgcmd-numstreams' is not checked, and could overflow the array streamcfgcmd-streamhandle...

PT-2017-19138

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises during DMA allocation in Qualcomm products with Android releases from CAF using the Linux kernel. Due to the...

PT-2017-18257

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A race condition in Qualcomm products with Android releases from CAF using the Linux kernel can allow access to already freed...

PT-2017-18256

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to potential race conditions during the wlan calibration data store and retrieve operation, which can lead...

PT-2017-18235

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when multiple threads attempt to open a device simultaneously, potentially leading to the device being opened...

CVE-2017-11002: Out-of-bounds Read

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur...

PT-2017-11670

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue allows for out of bounds access in the c show function due to compat hwcap str not being NULL-terminated. This error ...

PT-2017-19111

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises from the function msm compr ioctl shared, where the variable ddp-params length can be accessed and modified by...

PT-2017-18254

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A buffer overflow or integer overflow could occur while reading audio data from an unspecified driver in Qualcomm products with...

PT-2017-11671

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue concerns corruption of kernel memory due to a write to a PCIe register using a debugfs node. Recommendations At the...

PT-2017-18253

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises in the msm dba register client function when a client registration fails, leading to a use-after-free scenario...

CVE-2017-10996: Exposure of Sensitive Information to an Unauthorized Actor

In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in cshow, due to compathwcapstr not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access...

CVE-2017-11040: Exposure of Sensitive Information to an Unauthorized Actor

In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to...

PT-2017-11702

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue allows unauthorized access to information when reading from sysfs nodes, potentially exposing more data than intended...

CVE-2017-10997: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory...

PT-2017-19134

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by an off-by-one error in a camera driver, which can lead to an out-of-bounds read/write. Recommendations A...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to cause a service failure.

The vulnerability in all components of the Qualcomm Android operating system, from the CAF repository that uses Linux kernel, is caused by an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability in all components of Qualcomm’s Android operating system, from the CAF repository that uses Linux kernel, allows a hacker to trigger a race condition.

The vulnerability in all components of the Qualcomm Android operating system from the CAF repository, which uses Linux kernel, is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a remote attacker to trigger a race condition...

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HSDPA data transfer protocol in all components of the Qualcomm Android operating system, from the CAF repository that uses the Linux kernel, is due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause breaches of the confidentiality,...