CVE Vulnerability Catalog

All Qualcomm products with Android releases from CAF using the Linux kernel have a race condition in a WLAN driver that can lead to a Use After Free condition.

All Qualcomm products with Android releases from CAF using the Linux kernel have a race condition in a USB driver that can lead to a Use After Free condition.

In Qualcomm products with Android releases from CAF, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

All Qualcomm products with Android releases from CAF using the Linux kernel may leak kernel memory contents to system logs if a userspace string is not NULL-terminated.

All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to memory corruption in a video driver due to lack of bounds checking in memcpy().

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

Multiple untrusted search path vulnerabilities in the installer of Synology Assistant before version 6.1-15163 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks using malicious files.

In Qualcomm products with Android releases from CAF, in a driver function, a value from userspace is not properly validated, potentially leading to an out of bounds heap write.

In Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition.

All Qualcomm products with Android releases from CAF using the Linux kernel may have an issue with the camera application that can request frame/command buffer processing with invalid values, leading to a heap buffer over-read in the driver.

In Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write.

All Qualcomm products with Android releases from CAF using the Linux kernel have a race condition in a video driver potentially leading to a use-after-free condition.

All Qualcomm products with Android releases from CAF using the Linux kernel have a race condition in a video driver, which can lead to a double free.

All Qualcomm products with Android releases from CAF using the Linux kernel may experience a kernel fault when performing certain operations on a read-only virtual address in userspace.

In Qualcomm products with Android releases from CAF, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition.

All Qualcomm products with Android releases from CAF using the Linux kernel may be susceptible to a kernel overwrite in the camera driver during an ioctl call.

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper type downcasting, which may lead to a value improperly passing validation and causing an out of bounds write later.

In Qualcomm products with Android releases from CAF using the Linux kernel, there is an issue with the sde_rotator debug interface. When multiple processes access this interface for register reading, one process can free the debug buffer while another process is still using it.

In Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.

All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow vulnerability in boot.