2018

Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (inva

Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that lead

Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera cr

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p

Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyon

While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p

Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into para

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile a

While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kern

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdrag

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer

If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in

While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux ker

While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel

While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in S

Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permis

While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdra

While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobi

While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdrag

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapd

Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdrago

In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM,

If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copyin

In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the li

Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android fo

In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android

While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android rele

In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS

In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD And

While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow

A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the l

In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Andr

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could

An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could

A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected agai

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From f

In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in ver

Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android

Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p

While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header

While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum r

Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability e

The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi path

IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to emb