Advisories · Technology

Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android.

Every CVE that names Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2017-9691 CVE record

There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicor…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-17771 CVE record

In msm_isp_prepare_v4l2_buf in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-02-12, an array out of bounds can occur.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-17769 CVE record

Information leakage in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the audio driver.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-17766 CVE record

In wma_peer_info_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of num_peers received from firmware is not properly validated so that an integer…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-15859 CVE record

While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, in Android for MSM,…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-15852 CVE record

Information leak of the ISPIF base address in Android for MSM, Firefox OS for MSM, and QRD Android can occur in the camera driver.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-15846 CVE record

In the video_ioctl2() function in the camera driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-16, an untrusted pointer dereference may potentially occur.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-15826 CVE record

Due to a race condition in MDSS rotator in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-20, a double free vulnerability may potentially exist when two threads free the same per…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-15823 CVE record

In spectral_create_samp_msg() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-11, some values from firmware are not properly validated potentially leading to a buffer overflow.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14892 CVE record

In the function msm_pcm_hw_params() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-19, the return value of q6asm_open_shared_io() is not checked properly potentially leading t…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14891 CVE record

In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents of the stack can get leaked due to an uninitialized variable.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14883 CVE record

In the function wma_unified_power_debug_stats_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-18, if the value param_buf->num_debug_register received from the F…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14881 CVE record

While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14877 CVE record

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14876 CVE record

In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which c…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-14875 CVE record

In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-11087 CVE record

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading t…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-9681 CVE record

In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 30 Mar 2018
CVE-2017-17767 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-17765 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocat…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-17764 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an in…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-15862 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly vali…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-15861 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without val…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-15860 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-15829 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-15820 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur.
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-15817 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentia…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-14884 CVE record

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the function WLANQCMBR_McProcessMsg, a buffer overflow m…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 23 Feb 2018
CVE-2017-11072 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 16 Jan 2018
CVE-2017-13218 CVE record

Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 12 Jan 2018
CVE-2017-9712 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-9705 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-9689 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-15850 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-15848 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-15847 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-15845 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-14879 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-14873 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-14870 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-14869 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-11081 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-11080 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-11079 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-11066 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-11003 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-15849 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-11069 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 10 Jan 2018
CVE-2017-9716 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-6211 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14918 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14917 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14916 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14914 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14909 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14908 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14904 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14902 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14897 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017
CVE-2017-14895 CVE record

Qualcomm, Inc. Android for MSM, Firefox OS for MSM…: In Android for MSM, Firefox OS for MSM, QRD Android…
- Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android
Not analysed yet 5 Dec 2017