Browse CVEs

HIGH 7.8 CVE-2018-5835 If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases … Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-5887 While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Andro… Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-5888 While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS … Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-5889 While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox… Android Patch available Fix from $1,9502018-07-06 HIGH 7.5 CVE-2018-3577 While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android release… Android Patch available Fix from $1,9502018-07-06 HIGH 7.5 CVE-2018-5829 In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before… Android Patch available Fix from $1,9502018-07-06 HIGH 7.0 CVE-2018-5832 Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QR… Android Mitigation only Fix from $1,9502018-07-06 MEDIUM 5.5 CVE-2018-5836 In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… Android Patch available Fix from $1,6002018-07-06 HIGH 7.8 CVE-2017-18158 Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, … Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2017-18159 In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while … Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-3564 In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch le… Android Patch available Fix from $1,9502018-07-06 HIGH 7.8 CVE-2018-3569 A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM,… Android Patch available Fix from $1,9502018-07-06 HIGH 7.0 CVE-2017-15856 Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF us… Android Patch available Fix from $1,9502018-07-06 MEDIUM 5.5 CVE-2017-14872 While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android release… Android Patch available Fix from $1,6002018-07-06 MEDIUM 5.5 CVE-2017-14893 While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the … Android Patch available Fix from $1,6002018-07-06 MEDIUM 5.5 CVE-2017-15824 In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the fu… Android Patch available Fix from $1,6002018-07-06 HIGH 7.8 CVE-2018-5863 If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, … Android Patch available Fix from $1,9502018-06-15 MEDIUM 5.5 CVE-2017-18169 User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OS for MSM,… Android Patch available Fix from $1,6002018-06-15 MEDIUM 5.5 CVE-2018-5860 In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be… Android Patch available Fix from $1,6002018-06-15 HIGH 7.8 CVE-2018-5854 A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Li… Android Patch available Fix from $1,9502018-06-15 HIGH 7.8 CVE-2018-5857 In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using t… Android Patch available Fix from $1,9502018-06-15 HIGH 7.8 CVE-2018-10405 An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks.… Santa after 0.9.24 Fix from $1,9502018-06-13 HIGH 7.8 CVE-2018-5851 Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from… Android Patch available Fix from $1,9502018-06-12 HIGH 7.0 CVE-2018-5849 Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Ker… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2017-15842 Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for MSM, Fir… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2017-15854 The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handl… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2017-15857 In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF (An… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2017-18070 In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_ndp_end_rs… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-3571 In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a Use After Free condi… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-3572 While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android rele… Android Patch available Fix from $1,9502018-06-12