Scott Bauer

The issue is related to an information leak in the `cdrom ioctl drive status()` function in the Linux kernel, which could allow local attackers to read kernel memory. This is due to a cast from unsigned long to int that interferes with bounds checking, leading to potential data exposure. The vulnerability is associated with errors in data processing.

The issue involves an audio client pointer being dereferenced before its validity is checked. This could potentially lead to issues related to the handling of audio clients in Qualcomm products that utilize the Linux kernel.

A buffer overflow issue exists in the HSDPA protocol of Qualcomm products with Android releases from CAF, which utilizes the Linux kernel. This issue may allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

The issue is related to an array out-of-bounds access that can potentially occur in a camera driver.

A buffer overflow issue exists due to the variable set for determining the buffer size not being used to indicate the actual size of the buffer.

A remote code execution issue exists in the Broadcom networking driver. This affects Android products.

The issue is related to a wi-fi driver vulnerability in the Android operating system, specifically concerning the Broadcom wi-fi driver. It involves insufficient access control, which can be exploited by a local attacker to elevate their privileges.

An information disclosure issue in the Qualcomm camera driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process and is rated as Moderate.

A remote code execution issue in the Surfaceflinger service could allow an attacker to cause memory corruption during media file and data processing by using a specially crafted file. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. The vulnerability is caused by a buffer overflow in memory, which can be exploited by a remote attacker to inject arbitrary code.

An information disclosure issue in Qualcomm components, including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver, could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process.

The issue is related to the wcdcal hwdep ioctl shared function in the Qualcomm sound codec, which does not properly copy firmware data. This allows attackers to obtain sensitive information via a crafted application.

The issue is related to errors in frame handling in the decoder/ih264d parse pslice.c file of the Android mediaserver. It allows a remote attacker to cause a denial of service, resulting in device hang or reboot, by using a specially crafted media file.

The issue is related to the mediaserver in Android, which does not limit process-memory usage. This allows remote attackers to cause a denial of service, resulting in a device hang or reboot, via a crafted media file.

The issue is related to insufficient access control in the Android operating system. It can be exploited by a remote attacker using a specially crafted application that utilizes `conn launcher` access to gain privileges.