Browse CVEs

HIGH 7.8 CVE-2017-9723 The touchscreen driver synaptics_dsx in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-05, the size of a stack-allocated buffer … Android Patch available Fix from $1,9502018-03-30 HIGH 7.5 CVE-2017-15859 While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_D… Android Patch available Fix from $1,9502018-03-30 MEDIUM 5.5 CVE-2017-17769 Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver. Android No fix yet Fix from $1,6002018-03-30 MEDIUM 5.5 CVE-2017-9693 The length of attribute value for STA_EXT_CAPABILITY in __wlan_hdd_change_station in Android for MSM, Firefox OS for MSM, and QRD Android before 2017… Android Patch available Fix from $1,6002018-03-30 CRITICAL 9.8 CVE-2017-14876 In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf com… Android Patch available Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2017-14877 While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of… Android Patch available Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2017-14881 While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-aft… Android Patch available Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2017-14883 In the function wma_unified_power_debug_stats_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-18, if the value… Android Patch available Fix from $2,3002018-03-30 HIGH 7.8 CVE-2017-14892 In the function msm_pcm_hw_params() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-19, the return value of q6asm_open_shared_… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15823 In spectral_create_samp_msg() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, some values from firmware are not properly v… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15826 Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may po… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15846 In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer d… Android Patch available Fix from $1,9502018-03-30 HIGH 7.8 CVE-2017-15852 Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver. Android Mitigation only Fix from $1,9502018-03-30 HIGH 7.5 CVE-2017-11087 libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larg… Android Mitigation only Fix from $1,9502018-03-30 HIGH 7.5 CVE-2017-14875 In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a hea… Android Patch available Fix from $1,9502018-03-30 MEDIUM 5.3 CVE-2017-14891 In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents of the sta… Android Patch available Fix from $1,6002018-03-30 CRITICAL 9.8 CVE-2017-11010 In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, access … Android No fix yet Fix from $2,3002018-03-30 CRITICAL 9.8 CVE-2017-14906 In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding… Android Mitigation only Fix from $2,3002018-03-30 MEDIUM 6.5 CVE-2017-9681 In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel me… Android Mitigation only Fix from $1,6002018-03-30 CRITICAL 9.8 CVE-2014-4959 **DISPUTED** SQL injection vulnerability in SQLiteDatabase.java in the SQLi Api in Android allows remote attackers to execute arbitrary SQL commands … Android No fix yet Fix from $2,3002018-03-27 HIGH 7.8 CVE-2017-18061 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen … Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-18062 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen … Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-18065 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vent->v… Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2017-18066 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads t… Android Patch available Fix from $1,9502018-03-16 HIGH 7.8 CVE-2018-3560 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Double Free vulnerability exists in… Android Mitigation only Fix from $1,9502018-03-16 HIGH 7.5 CVE-2017-18057 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id… Android Patch available Fix from $1,9502018-03-16 HIGH 7.5 CVE-2017-18058 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wow_buf… Android Patch available Fix from $1,9502018-03-16 HIGH 7.5 CVE-2017-18059 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id… Android Patch available Fix from $1,9502018-03-16 HIGH 7.5 CVE-2017-18060 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for resp_ev… Android Patch available Fix from $1,9502018-03-16 HIGH 7.0 CVE-2018-3561 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_de… Android Mitigation only Fix from $1,9502018-03-16