Browse CVEs

HIGH 7.8 CVE-2018-5831 In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level… Android Patch available Fix from $1,9502018-07-06 HIGH 7.0 CVE-2018-5832 Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QR… Android Mitigation only Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-3564 In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch le… Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-5857 In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using t… Android Patch available Fix from $1,9502018-06-15 HIGH 7.0 CVE-2018-5849 Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Ker… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2017-15842 Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for MSM, Fir… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-3571 In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a Use After Free condi… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-5844 In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases from CAF (An… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-5847 Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, Firefox OS … Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-5846 A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUT… Android Patch available Fix from $1,9502018-06-06 HIGH 7.0 CVE-2018-5845 A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android releases f… Android Patch available Fix from $1,9502018-06-06 CRITICAL 9.8 CVE-2017-13272 In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privileg… Android Mitigation only Fix from $2,3002018-04-04 MEDIUM 6.5 CVE-2017-13257 In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. Th… Android Mitigation only Fix from $1,6002018-04-04 HIGH 7.8 CVE-2017-13278 In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502018-04-04 CRITICAL 9.8 CVE-2018-3599 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $2,3002018-04-03 HIGH 7.8 CVE-2018-5825 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,9502018-04-03 MEDIUM 5.9 CVE-2018-5826 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,6002018-04-03 HIGH 7.8 CVE-2017-11075 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,9502018-04-03 HIGH 7.5 CVE-2018-3584 In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve… Android Mitigation only Fix from $1,9502018-04-03 CRITICAL 9.8 CVE-2017-14877 While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of… Android Patch available Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2017-14881 While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-aft… Android Patch available Fix from $2,3002018-03-30 HIGH 7.8 CVE-2017-18066 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads t… Android Patch available Fix from $1,9502018-03-16 HIGH 7.0 CVE-2018-3561 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_de… Android Mitigation only Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-15820 In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially o… Android Mitigation only Fix from $1,9502018-02-23 HIGH 8.8 CVE-2017-5126 A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF … Chrome 62.0.3202.62+ Fix from $1,9502018-02-07 HIGH 8.8 CVE-2017-5127 Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF fi… Chrome 62.0.3202.62+ Fix from $1,9502018-02-07 HIGH 8.8 CVE-2017-5129 A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a … Chrome 62.0.3202.62+ Fix from $1,9502018-02-07 MEDIUM 6.5 CVE-2017-15395 A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 62.0.3202.62+ Fix from $1,6002018-02-07 CRITICAL 9.8 CVE-2017-13178 In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails.… Android Patch available Fix from $2,3002018-01-12 CRITICAL 9.8 CVE-2017-13179 In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free. Both ps_… Android Patch available Fix from $2,3002018-01-12