Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-10682)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm WLAN component, which can be exploited by attackers to elevate privileges...

PT-2018-1386

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by a buffer overflow in the lim send sme probe req ind function of the Qualcomm WLAN component in the Android operating system. This can allow a remote attacker to elevate...

PT-2018-1376

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by an integer underflow in the csr update fils params rso function of the Qualcomm WLAN component in the Android operating system. This underflow can lead to a buffer...

PT-2018-1382

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by a heap buffer overflow in the Qualcomm WLAN driver, which can be exploited by a remote attacker to elevate their privileges. This is due to a type mismatch for ie len,...

PT-2018-1381

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A stack-based buffer overflow can occur in the WLAN driver if the pmkid count value is larger than the PMKIDCache size. This issue affects all Android releases from CAF, which includes Androi...

Input validation

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

CVE-2017-9657

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

CVE-2017-9657

The CVE-2017-9657 entry describes an 802.11 WLAN issue in Philips IntelliVue MX40 (Version B.06.18) where partial re-association to the central monitor can leave the MX40 in telemetry mode while the central station expects local monitoring, potentially delaying alarms. Root causes cited include I...

CVE-2017-9657

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

PT-2018-8518

Name of the Vulnerable Software and Affected Versions Philips IntelliVue MX40 Version B.06.18 Description The issue occurs under specific 802.11 network conditions, where a partial re-association of the Philips IntelliVue MX40 WLAN monitor to the central monitoring station is possible. This can...

CVE-2017-9657: Improper Cleanup on Thrown Exception

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

The vulnerability of the wma_nlo_match_evt_handler function in the Android WLAN operating system from the CAF repository allows a attacker to execute arbitrary code.

The vulnerability of the wmanlomatchevthandler function in the Android WLAN operating system from the CAF repository is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

The vulnerability of the `lim_process_action_vendor_specific` function in the Android WLAN operating system component from the CAF repository, which allows a hacker to disclose protected information

The vulnerability of the limprocessactionvendorspecific function in the Android WLAN operating system from the CAF repository arises due to an operation occurring outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is...

The vulnerability of the oemcmd_handler function in the Android operating system’s WLAN component from the CAF repository allows a hacker to disclose protected information.

The vulnerability of the oemcmdhandler function in the Android operating system’s WLAN component from the CAF repository is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using a...

The vulnerability of the wma_roam_scan_filter function in the Android operating system’s WLAN component from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmaroamscanfilter function in the Android WLAN operating system from the CAF repository is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a specially...

The vulnerability of the `wma_unified_bcntx_status_event_handler` function in the Android WLAN operating system component from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmaunifiedbcntxstatuseventhandler function in the Android WLAN operating system from the CAF repository involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged proces...

The vulnerability of the `wma_unified_link_peer_stats_event_handler` function in the Android WLAN operating system component from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmaunifiedlinkpeerstatseventhandler function in the Android WLAN operating system from the CAF repository is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a...

The vulnerability of the wma_p2p_noa_event_handler function in the Android WLAN operating system from the CAF repository allows a perpetrator to execute arbitrary code.

The vulnerability of the wmap2pnoaeventhandler function in the Android operating system, originating from the CAF repository, is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

CVE-2016-10481

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808...