|
198271
|
7.8 |
HIGH
Local
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while doing sha and cipher operations, a userspace buffer is directly accessed in kerne…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-11056
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198272
|
7.5 |
HIGH
Network
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_SET_WIFI_CONFIGURATION c…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-11055
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198273
|
7.5 |
HIGH
Network
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted cfg80211 vendor command, a buffer over-read can oc…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-11054
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198274
|
7.8 |
HIGH
Local
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when qos map set IE of length less than 16 is received in association response or in qo…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-11053
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198275
|
7.5 |
HIGH
Network
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor comm…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-11052
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198276
|
7.5 |
HIGH
Network
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, information disclosure is possible in function __wlan_hdd_cfg80211_testmode since buffe…
|
CWE-200
Information Exposure
|
CVE-2017-11051
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198277
|
7.8 |
HIGH
Local
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when the pktlogconf tool gives a pktlog buffer of size less than the minimal possible s…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-11050
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198278
|
7.8 |
HIGH
Local
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a display driver function, a Use After Free condition can occur.
|
CWE-416
Use After Free
|
CVE-2017-11048
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198279
|
7.8 |
HIGH
Local
|
google
|
android
|
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentia…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-11046
|
2024-11-21 12:07 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198280
|
7.5 |
HIGH
Network
|
broadcom apple
|
bcm4355c0_firmware iphone_os tvos
|
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading.
|
CWE-200
Information Exposure
|
CVE-2017-11122
|
2024-11-21 12:07 |
2017-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|