CVE-2015-9064: Improper Access Control

In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network request before NAS security has been activated...

CVE-2014-9969: Use of a Broken or Risky Cryptographic Algorithm

In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm...

CVE-2014-9411: Incorrect Access of Indexable Resource

In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback protection...

CVE-2015-9054: NULL Pointer Dereference

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding...

CVE-2017-8272: Out-of-bounds Write

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated potentially leading to an out of bounds heap write...

CVE-2017-8270: Concurrent Execution using Shared Resource with Improper Synchronization

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition...

CVE-2015-9055: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory management routine...

CVE-2015-9048: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...

CVE-2015-9046: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list...

CVE-2014-9978: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service...

CVE-2014-9977: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM...

CVE-2014-9975: Inadequate Encryption Strength

In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption...

CVE-2014-9971: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed resulting in incorrect control flow...

CVE-2015-9061: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized access to secure memory...

CVE-2015-9050: Out-of-bounds Read

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call...

CVE-2015-9042: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message...

CVE-2015-8593: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing...

CVE-2014-9972: NULL Pointer Dereference

In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an out-of-memory condition...

CVE-2017-8263: Undefined Security Weakness

In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual address in userspace...

PT-2017-19113

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when a driver handles an invalid pointer argument from userspace. In such cases, the driver may utilize an...