CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-11056
https://notcve.org/view.php?id=CVE-2017-11056
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while doing sha and cipher operations, a userspace buffer is directly accessed in kernel space potentially leading to a page fault. En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, al realizar operaciones sha y de cifrado, se accede directamente a un búfer userspace en el espacio del kernel, lo que podría provocar un fallo de página. • http://www.securityfocus.com/bid/101160 https://source.android.com/security/bulletin/pixel/2017-10-01 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-11059
https://notcve.org/view.php?id=CVE-2017-11059
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, setting the HMAC key by different threads during SHA operations may potentially lead to a buffer overflow. En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, definir la clave HMAC con hilos diferentes durante las operaciones SHA puede provocar un desbordamiento de búfer. • http://www.securityfocus.com/bid/101160 https://source.android.com/security/bulletin/pixel/2017-10-01 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-9717
https://notcve.org/view.php?id=CVE-2017-9717
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing Netlink attributes, a buffer overread can occur. En Android for MSM, Firefox OS for MSM, QRD Android con todas las versiones de Android desde CAF usando el kernel de Linux, al analizar sintácticamente atributos Netlink, puede ocurrir una sobrelectura de búfer. • http://www.securityfocus.com/bid/101160 https://source.android.com/security/bulletin/pixel/2017-10-01 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-11046
https://notcve.org/view.php?id=CVE-2017-11046
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur. En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, cuando se llama a un manipulador de llamadas IOCTL de controladores de audio, podría ocurrir una escritura de kernel fuera de límites. • http://www.securityfocus.com/bid/101160 https://source.android.com/security/bulletin/pixel/2017-10-01 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-11064
https://notcve.org/view.php?id=CVE-2017-11064
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 vendor commands in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_passpoint_fill_network_list function respectively. Android ID: A-36815952. References: QC-CR#2054770, QC-CR#2058447, QC-CR#2066628, QC-CR#2087785 En Android for MSM, Firefox OS for MSM, QRD Android, con todas las distribuciones de Android de CAF que utilizan el kernel de Linux, se observa una sobrelectura de búfer mientras se procesan comandos de fabricante ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST y QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 en las funciones __wlan_hdd_cfg80211_set_passpoint_list y hdd_extscan_passpoint_fill_network_list respectivamente. Android ID: A-36815952. Referencias: QC-CR#2054770, QC-CR#2058447, QC-CR#2066628, QC-CR#2087785 • http://www.securityfocus.com/bid/101160 https://source.android.com/security/bulletin/pixel/2017-10-01 • CWE-125: Out-of-bounds Read •