CVE Vulnerability Catalog

NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used to cause an unintended authenticated action in the user interface.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a buffer over-read vulnerability in the display module. This issue arises from a lack of upper-bound validation when reading 'num_of_cea_blocks' from an untrusted source (EDID), potentially exposing kernel memory.

In Android for MSM, Firefox OS for MSM, and QRD Android, a Use After Free condition may occur in the kgsl_ioctl_gpu_command function of the KGSL driver.

In Android for MSM, Firefox OS for MSM, and QRD Android, in the function mdss_rotator_ioctl in the driver /dev/mdss_rotator, a Use-After-Free condition can potentially occur due to a fence being installed too early.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overread is observed in __wlan_hdd_cfg80211_set_pmksa when a user space application sends PMKID of size less than WLAN_PMKID_LEN bytes.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overread is observed in nl80211_set_station. This issue occurs when a user space application sends the NL80211_ATTR_LOCAL_MESH_POWER_MODE attribute with data smaller than 4 bytes.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an integer overflow leading to a buffer overflow due to improper bound checking in the msm_audio_effects_virtualizer_handler function.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to qcacld pktlog that allows mapping memory to user space via /proc/ath_pktlog/cld.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer over-read can occur while processing a specially crafted cfg80211 vendor command.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to processing the boot image header. Range checks can be bypassed by supplying different versions of the header at the time of check and use.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a potential buffer overflow or information leak in the functions 'sme_set_ft_ies' and 'csr_roam_issue_ft_preauth_req' due to incorrect initialization of WEXT callbacks and lack of buffer size checks.

In Android for MSM, Firefox OS for MSM, and QRD Android, a vulnerability related to double free can occur when kmalloc fails to allocate memory for pointers resp/req in the service-locator driver function service_locator_send_msg().

The camera application in Android for MSM has a user-memory-access issue as the Camera CPP module Linux driver directly accesses the application provided buffer. An unchecked userspace value can lead to kernel buffer overflow.

In the ISP Camera driver for Android on MSM, there is a vulnerability that allows the contents of an arbitrary kernel address to be leaked to userspace via the function msm_isp_get_stream_common_data().

In Android for MSM, Firefox OS for MSM, and QRD Android, while flashing UBI image, the size is not validated, leading to an uninitialized data access vulnerability.

In Android for MSM, Firefox OS for MSM, and QRD Android, while flashing FRP partition using reference FRP unlock, the authentication method can be compromised for static keys.

In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition in the function audio_effects_shared_ioctl() can lead to memory corruption.

In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition in the rmnet USB control driver can potentially lead to a Use After Free condition.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a possibility of out-of-bound buffer accesses due to no synchronization in accessing global variables by multiple threads.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to out-of-bounds array access in the camera driver in the kernel.