Vulnerabilities of Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2018-5842	An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android…	Not rated	Jun 12, 2018
CVE-2018-5849	Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD…	Not rated	Jun 12, 2018
CVE-2018-5848	In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly	Not rated	Jun 12, 2018
CVE-2018-3576	improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds…	Not rated	Jun 12, 2018
CVE-2018-3582	Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android…	Not rated	Jun 12, 2018
CVE-2018-3572	While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing…	Not rated	Jun 12, 2018
CVE-2018-3581	In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux…	Not rated	Jun 12, 2018
CVE-2018-3571	In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux…	Not rated	Jun 12, 2018
CVE-2018-3579	In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux…	Not rated	Jun 12, 2018
CVE-2017-18070	In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of…	Not rated	Jun 12, 2018
CVE-2017-15854	The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in…	Not rated	Jun 12, 2018
CVE-2017-15843	Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all…	Not rated	Jun 12, 2018
CVE-2017-15842	Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases…	Not rated	Jun 12, 2018
CVE-2018-5846	A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs…	Not rated	Jun 6, 2018
CVE-2018-5845	A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free…	Not rated	Jun 6, 2018
CVE-2018-5850	In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow…	Not rated	Jun 6, 2018
CVE-2018-5841	dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a…	Not rated	Jun 6, 2018
CVE-2018-5840	Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android…	Not rated	Jun 6, 2018
CVE-2018-3578	Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading…	Not rated	Jun 6, 2018
CVE-2018-3565	While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for…	Not rated	Jun 6, 2018
CVE-2018-3562	Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for…	Not rated	Jun 6, 2018
CVE-2018-3580	Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size…	Not rated	Jun 6, 2018
CVE-2017-18154	A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for…	Not rated	Jun 6, 2018
CVE-2018-5827	In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux…	Not rated	May 17, 2018
CVE-2018-3567	In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux…	Not rated	May 17, 2018

Other Qualcomm, Inc. products