Hao Chen

O problema está relacionado a um possível estouro de buffer devido à falta de verificação do comprimento do parâmetro durante a análise do IE de varredura de MBSSID. Isso pode ser explorado por um invasor remoto para comprometer a confidencialidade, a integridade e a disponibilidade das informações protegidas. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado. Não há informações sobre incidentes reais em que essa vulnerabilidade tenha sido explorada.

The issue is related to an information disclosure vulnerability in the Qualcomm audio driver. It affects Android products.

The issue is related to an elevation of privilege vulnerability in the Qualcomm WiFi driver. It affects the Android product.

Name of the Vulnerable Software and Affected Versions: Prague smart phones versions earlier than Prague-AL00AC00B211 Prague smart phones versions earlier than Prague-AL00BC00B211 Prague smart phones versions earlier than Prague-AL00CC00B211 Prague smart phones versions earlier than Prague-TL00AC01B211 Prague smart phones versions earlier than Prague-TL10AC01B211 Description: The Bdat driver has an integer overflow issue due to a lack of parameter validation. This can be exploited by an attacker who tricks a user into installing a malicious APP, which can then send a specific parameter to the driver, potentially leading to arbitrary code execution. Recommendations: For versions earlier than Prague-AL00AC00B211, update to Prague-AL00AC00B211 or later. For versions earlier than Prague-AL00BC00B211, update to Prague-AL00BC00B211 or later. For versions earlier than Prague-AL00CC00B211, update to Prague-AL00CC00B211 or later. For versions earlier than Prague-TL00AC01B211, update to Prague-TL00AC01B211 or later. For versions earlier than Prague-TL10AC01B211, update to Prague-TL10AC01B211 or later.

The issue is related to a stack overflow in the touchscreen drive. An attacker can exploit this by tricking a user into installing a malicious application on the smartphone and sending a specific parameter to the touchscreen drive, which can cause the system to crash or escalate privileges.

The issue is caused by a buffer overflow due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privilege, which can send a specific parameter to the smart phone, potentially causing the smartphone to restart or allowing arbitrary code execution.

The issue allows an attacker to trick a user into installing a malicious application on the smart phone. By sending a given parameter, the attacker can cause any memory access issues, leading to sensitive information leakage.

The issue allows an attacker to trick a user into installing a malicious application on the smart phone. By sending a given parameter, the attacker can cause any memory access vulnerabilities, leading to sensitive information leakage.

The issue is related to an out-of-bound read. An attacker can trick a user into installing a malicious application on the smart phone and send a given parameter to cause memory out-of-bound read.

The issue is related to a camera driver on the MTK platform, which has an arbitrary memory write vulnerability due to insufficient input verification. This can be exploited by an attacker who tricks a user into installing a malicious application with special privileges, allowing the attacker to send a specific parameter to the driver and cause privilege escalation.

The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing an attacker to trick a user into installing a malicious application with special privileges. This application can send a specific parameter to the smartphone's driver, resulting in privilege escalation.

The issue is caused by a buffer overflow due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privilege, which can send a specific parameter to the smart phone, potentially causing the smartphone to restart or allowing for arbitrary code execution.

A elevation of privilege issue exists in the Broadcom wi-fi driver, affecting Android.

A elevation of privilege vulnerability exists in the Broadcom wi-fi driver. This issue affects Android products.

A elevation of privilege vulnerability exists in the Broadcom wi-fi driver. This issue affects the Android kernel.

The issue is related to an elevation of privilege vulnerability in the Broadcom wi-fi driver.

A elevation of privilege vulnerability exists in the Broadcom wi-fi driver. This issue affects Android products.

The issue is related to an elevation of privilege vulnerability in the Broadcom wi-fi driver.

An elevation of privilege issue in the Synaptics Touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue requires compromising a privileged process and is related to insufficient access control to certain functions.

The issue is related to insufficient access control in the Broadcom Wi-Fi driver of the Android operating system. It allows a remote attacker to execute arbitrary code within the context of the kernel using a special application. This is an elevation of privilege issue that could enable a local malicious application to execute arbitrary code within the context of the kernel, but it first requires compromising a privileged process.