CVE-2016-10392: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory...

CVE-2017-9678: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy...

PT-2017-18239

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when userspace sends more than 16 multicast addresses, leading to an array out of bounds access. Recommendatio...

PT-2017-18240

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when multiple processes access the sde rotator debug interface for register reading. In such cases, one proces...

PT-2017-18247

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A race condition exists in a video driver of the affected products, potentially leading to a use-after-free condition...

PT-2017-19112

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue allows kernel memory contents to leak to system logs if a userspace string is not NULL-terminated. Recommendations At...

PT-2017-7540

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A pointer is not properly validated in a QTEE system call in the Linux kernel used by Qualcomm products with Android releases...

PT-2017-7535

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A NULL pointer can be dereferenced during GAL decoding, which may lead to issues in the system. Recommendations At the moment,...

PT-2017-7541

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to playReady DRM in Qualcomm products, where it failed to check a length, potentially leading to...

PT-2017-7543

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A potential compiler optimization of memset is addressed in Qualcomm products with Android releases from CAF using the Linux...

PT-2017-8796

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description An integer overflow to buffer overflow issue exists when loading an image file. Recommendations At the moment, there is no...

PT-2017-7542

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description An integer overflow to buffer overflow issue exists when loading an ELF file. Recommendations At the moment, there is no...

PT-2017-18238

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue involves an audio client pointer being dereferenced before its validity is checked. This could potentially lead to...

PT-2017-18243

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by a type downcast that allows a value to improperly pass validation, potentially leading to an out of boun...

PT-2017-7536

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description An assertion was potentially reachable in a memory management routine in Qualcomm products with Android releases from CAF using...

CVE-2017-9682: Exposure of Sensitive Information to an Unauthorized Actor

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition...

CVE-2017-8267: Integer Overflow or Wraparound

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write...

CVE-2016-10384: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl...

CVE-2016-10382: Improper Access Control

In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient...

CVE-2017-7364: Use After Free

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function mdssfbcopydestscalerdata, variable dsdatai.scale may still point to a user-provided address which could point to arbitrary kernel address, so on an error condition, this user-provided address will be freed...