12335 matches found
CVE-2015-0575: Inadequate Encryption Strength
In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration...
CVE-2014-9974: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster...
CVE-2014-9972: NULL Pointer Dereference
In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an out-of-memory condition...
CVE-2017-8263: Undefined Security Weakness
In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual address in userspace...
CVE-2015-8594: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x...
CVE-2016-10384: Improper Input Validation
In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl...
PT-2017-7532
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A vulnerability exists in LTE due to an improper bound on a length in a System Information message, which can cause an assertio...
CVE-2016-10386: Improper Validation of Array Index
In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP...
CVE-2017-8261: Undefined Security Weakness
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially occur...
PT-2017-19113
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises when a driver handles an invalid pointer argument from userspace. In such cases, the driver may utilize an...
PT-2017-18246
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description A race condition exists in a video driver in the affected products, which can lead to a double free. Recommendations At the...
CVE-2016-5872: Improper Input Validation
In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated...
CVE-2015-9060: Improper Input Validation
In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call...
CVE-2015-9036: Improper Restriction of Operations within the Bounds of a Memory Buffer
In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulting in adjacent memory getting corrupted...
PT-2017-18251
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises from a driver function in Qualcomm products that use the Linux kernel, where a value from userspace is not...
CVE-2015-0574: Improper Input Validation
In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient...
PT-2017-2772
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to a TOCTOU race condition in Secure UI, caused by synchronization errors when using a shared resource. Th...
CVE-2016-10391: Improper Input Validation
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity...
CVE-2015-9054: NULL Pointer Dereference
In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding...