CVE Vulnerability Catalog

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with the GPS location wireless interface that can lead to a Use After Free condition.

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with improper validation of buffer sizes in the message passing interface.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with handling in the global client structure, which may lead to stale handles.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with improper validation of a count value read from a file.

The SafeSwitch test application in Android for MSM, Firefox OS for MSM, and QRD Android has an issue with improper validation of the number of blocks to verify.

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an arbitrary unmap in MediaServer.

In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition in the GLink kernel driver may lead to a Use After Free condition.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a vulnerability related to direct access to a userspace buffer in kernel space while handling the QSEOS_RPMB_CHECK_PROV_STATUS_COMMAND.

In Android for MSM, Firefox OS for MSM, and QRD Android, after a subsystem reset, iwpriv does not provide correct information. This affects all Android releases from CAF using the Linux kernel.

In Android for MSM, Firefox OS for MSM, and QRD Android, in a WiFi driver function, an integer overflow leading to heap buffer overflow may potentially occur.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a possibility of stack corruption due to buffer overflow of Partition name while converting ascii string to unicode string in function HandleMetaImgFlash.

In Android for MSM, Firefox OS for MSM, and QRD Android, a Use After Free condition can occur during positioning.

In Android for MSM, Firefox OS for MSM, and QRD Android, a Use After Free condition can occur during a deinitialization path.

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. An authenticated user may repeatedly rebuild an instance with new images, leading to untracked resource consumption on a hypervisor host, resulting in denial of service.

In Android for MSM, Firefox OS for MSM, and QRD Android, a buffer overflow vulnerability occurs when updating custom EDID if edid_size, controlled by userspace, is too large.

In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition in a multimedia driver can potentially lead to a buffer overwrite.

In Android for MSM, Firefox OS for MSM, and QRD Android, the IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts, which can lead to buffer overflow of the msg cache.

In Android for MSM, Firefox OS for MSM, and QRD Android, there is a privilege escalation vulnerability in telephony affecting all Android releases from CAF using the Linux kernel.

In Android for MSM, in the camera driver, the function 'msm_ois_power_down' is called without a mutex, which can lead to race conditions in the variable '*reg_ptr' of the sub function 'msm_camera_config_single_vreg'.