Derrek

A null pointer dereference issue was addressed with improved validation, which may allow an attacker in a privileged position to perform a denial of service attack.

The issue is related to a memory corruption in the Kernel due to a race condition while getting a mapping reference. This can occur in various Snapdragon products, including Compute, Connectivity, Industrial IOT, and Mobile. The vulnerability is associated with synchronization errors when using a shared resource. Exploitation of this issue may allow an attacker to cause a denial of service or execute arbitrary code.

A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges.

An out-of-bounds read issue existed, leading to the disclosure of kernel memory. This issue was addressed with improved input validation. A remote attacker may be able to leak memory.

An information disclosure issue was addressed with improved state management, allowing a local user to potentially read kernel memory.

A buffer overflow issue was addressed through improved size validation. This could allow a remote attacker to cause unexpected system termination or corrupt kernel memory.

The issue involves the Kernel component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app, resulting in memory corruption.

A buffer overflow issue exists in the HSDPA protocol of Qualcomm products with Android releases from CAF, which utilizes the Linux kernel. This issue may allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

The issue is caused by a type downcast that allows a value to improperly pass validation, potentially leading to an out of bounds write.

The issue is related to an elevation of privilege vulnerability in the Qualcomm crypto engine driver. This could allow a local malicious application to execute arbitrary code within the context of the kernel. The vulnerability is rated as High because it first requires compromising a privileged process.

An information disclosure issue in the Qualcomm camera driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process and is rated as Moderate.

An information disclosure issue in the Qualcomm Wi-Fi driver could allow a local malicious application to access data outside of its permission levels, requiring a privileged process to be compromised first.

The issue is related to insufficient access control in the VBRISeeker.cpp function of the libstagefright media server in the Android operating system. This can allow a remote attacker to exploit the issue and potentially compromise information confidentiality. Additionally, a remote attacker could use a specially crafted file to cause a device hang or reboot, resulting in a denial of service.

The issue is related to insufficient access control in the Framesequence library of the Android operating system. It allows a remote attacker to execute arbitrary code using a specially crafted file. This can lead to remote code execution in the context of an unprivileged process.