CVE Vulnerability Catalog

In Android for MSM, Firefox OS for MSM, and QRD Android, while flashing a meta image, an integer overflow can occur if user-defined image offset and size values are too large.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with the lack of proper address sanity checks in the Athdiag procfs entry. This may lead to the use of an out-of-range pointer offset.

In Android for MSM and Firefox OS for MSM, a buffer overread issue is observed during the processing of cfg80211 vendor commands related to the passpoint list. This issue affects all Android releases using the Linux kernel.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with attribute validation in the __wlan_hdd_cfg80211_do_acs function, which can potentially lead to a buffer overread.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer over-read can occur while processing the QCA_NL80211_VENDOR_SUBCMD_ROAM subcommand in cfg80211. This affects all Android releases using the Linux kernel.

In Android for MSM and Firefox OS for MSM, a buffer overread issue is observed during the processing of cfg80211 vendor commands related to the passpoint list. This issue affects all Android releases using the Linux kernel.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to setting the HMAC key by different threads during SHA operations, which may lead to a buffer overflow.

In Android for MSM, Firefox OS for MSM, and QRD Android, in compatibility mode, flash_data from 64-bit userspace may lead to disclosure of kernel memory or a fault due to using a userspace-provided address.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with accessing a userspace buffer in kernel space during sha and cipher operations, potentially leading to a page fault.

In Android for MSM, Firefox OS for MSM, and QRD Android, a vulnerability exists when processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_SET_WIFI_CONFIGURATION cfg80211 vendor command, which can lead to a buffer over-read.

In Android for MSM, Firefox OS for MSM, and QRD Android, a vulnerability exists related to processing a specially crafted cfg80211 vendor command, which can lead to a buffer over-read.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overflow vulnerability exists in the ConvertQosMapsetFrame() function when a QoS map of length less than 16 is received in an association response or in a QoS map configure action frame.

In Android for MSM, Firefox OS for MSM, and QRD Android, a vulnerability exists when processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor command, which can lead to a buffer over-read.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability that allows information disclosure in the function __wlan_hdd_cfg80211_testmode due to the uninitialized buffer hb_params.

In Android for MSM, Firefox OS for MSM, and QRD Android, a vulnerability exists related to the pktlogconf tool that can lead to a buffer overflow. This issue occurs when the pktlog buffer size is less than the minimum required source data size in the host driver.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a Use After Free condition in a display driver function.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a potential out-of-bounds write vulnerability in the kernel when an audio driver ioctl handler is called.

The sudoers plugin in sudo after version 1.8.7 has a vulnerability that allows local users with write permissions to parts of the called command to replace them before execution.

Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.

Node.js versions 4.0.0, 4.1.0, and 4.1.1 allow remote attackers to cause a denial of service.