Google : Security Vulnerabilities, CVEs, Published In 2017 (Memory corruption) CVSS score >= 5
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition can occur.
Max CVSS
10.0
EPSS Score
0.13%
Published
2017-12-05
Updated
2017-12-20
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the GLink kernel driver, a Use After Free condition can potentially occur.
Max CVSS
7.0
EPSS Score
0.04%
Published
2017-12-05
Updated
2017-12-15
An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.
Max CVSS
7.8
EPSS Score
0.06%
Published
2017-12-06
Updated
2019-10-03
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgsl_ioctl_gpu_command, a Use After Free condition can potentially occur.
Max CVSS
9.3
EPSS Score
0.07%
Published
2017-11-16
Updated
2017-11-30
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function mdss_rotator_ioctl in the driver /dev/mdss_rotator, a Use-After-Free condition can potentially occur due to a fence being installed too early.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-11-16
Updated
2017-11-30
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, as a result of a race condition between two userspace processes that interact with the driver concurrently, a null pointer dereference can potentially occur.
Max CVSS
5.9
EPSS Score
0.10%
Published
2017-10-10
Updated
2019-10-03
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a display driver function, a Use After Free condition can occur.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-10-10
Updated
2017-10-19
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-10-10
Updated
2017-10-19
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition exists which can lead to a Use After Free condition.
Max CVSS
7.0
EPSS Score
0.04%
Published
2017-12-05
Updated
2017-12-19
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a race condition exists which can lead to a Use After Free condition.
Max CVSS
7.0
EPSS Score
0.04%
Published
2017-12-05
Updated
2017-12-19
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, a simultaneous read and enable of the ETR device after changing the buffer size may result in a Use After Free condition of the previous buffer.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-12-05
Updated
2017-12-19
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a double free can occur when kmalloc fails to allocate memory for pointers resp/req in the service-locator driver function service_locator_send_msg().
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-11-16
Updated
2017-11-30
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOC_G_SDE_ROTATOR_FENCE ioctl command can be used to cause a Use After Free condition.
Max CVSS
7.5
EPSS Score
0.08%
Published
2017-12-05
Updated
2017-12-19
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in the function audio_effects_shared_ioctl(), memory corruption can occur.
Max CVSS
7.0
EPSS Score
0.04%
Published
2017-11-16
Updated
2017-11-30
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in the rmnet USB control driver can potentially lead to a Use After Free condition.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-11-16
Updated
2017-11-30
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_ENCRYPTION_TEST cfg80211 vendor command a stack-based buffer overflow can occur.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-11-16
Updated
2019-10-03
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning.
Max CVSS
10.0
EPSS Score
0.13%
Published
2017-12-05
Updated
2017-12-15
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path.
Max CVSS
10.0
EPSS Score
0.13%
Published
2017-12-05
Updated
2017-12-15
In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing locks.
Max CVSS
7.8
EPSS Score
0.06%
Published
2017-09-21
Updated
2019-10-03
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera driver can lead to a Use After Free condition.
Max CVSS
7.0
EPSS Score
0.04%
Published
2017-12-05
Updated
2017-12-15
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipc_log_context_destroy(). Another issue is the Use-After-Free which can happen due to the race condition when the ipc log is deallocated via the debugfs call during a log print.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-10-10
Updated
2017-10-19
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possible double free/use after free in the SPS driver when debugfs logging is used.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-10-10
Updated
2017-10-19
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition.
Max CVSS
9.3
EPSS Score
0.12%
Published
2017-08-18
Updated
2017-08-27
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition.
Max CVSS
7.6
EPSS Score
0.07%
Published
2017-08-18
Updated
2017-08-22
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
Max CVSS
9.3
EPSS Score
0.06%
Published
2017-08-18
Updated
2017-08-22