10 matches found
EUVD-2018-15435
Malware in sbrugna...
Buffer overflow
In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, a buffer overwrite can occur if the vdevid received from firmware is larger than maxbssid...
CVE-2018-3581
In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, a buffer overwrite can occur if the vdevid received from firmware is larger than maxbssid...
CVE-2018-3581: Improper Restriction of Operations within the Bounds of a Memory Buffer
In the WLAN driver in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel, a buffer overwrite can occur if the vdevid received from firmware is larger than maxbssid...
CVE-2017-18065: Improper Input Validation
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vent-vdevid in wmaactionframefiltermaceventhandler, which is received from firmware, leads to arbitrary code execution...
CVE-2017-18060: Improper Input Validation
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for respevent-vdevid in wmaunifiedbcntxstatuseventhandler, which is received from firmware, leads to potential out of bounds memory read...
CVE-2017-18053: Improper Input Validation
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for fixparam-vdevid in wmap2ploeventhandler, which is received from firmware, leads to potential out of bounds memory read...
CVE-2017-18051: Improper Input Validation
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event-vdevid in wmarcpieventhandler, which is received from firmware, leads to potential out of bounds memory read...
CVE-2017-18056: Improper Input Validation
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdevid in wmaunifiedbcntxstatuseventhandler which is received from firmware leads to potential out of bounds memory read...
CVE-2017-15861: Improper Validation of Array Index
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wmaroamsyncheventhandler, vdevid is received from firmware and used to access an array without validation...