Google Android Qualcomm Components Multiple Security Vulnerabilities

Bugtraq ID:	99465
Class:	Unknown
CVE:	CVE-2017-8255 CVE-2016-10389 CVE-2017-8253 CVE-2017-8262 CVE-2017-8263 CVE-2017-8267 CVE-2017-8273 CVE-2016-5863 CVE-2017-8243 CVE-2017-8256 CVE-2017-8257 CVE-2017-8259 CVE-2017-8260 CVE-2017-8261 CVE-2017-8264 CVE-2017-8265 CVE-2017-8266 CVE-2017-8268 CVE-2017-8270 CVE-2017-8271 CVE-2017-8272 CVE-2017-8254 CVE-2017-8258 CVE-2017-8269
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	Yonggang Guo, Gengjia Chen, Jianqiang Zhao and pjf of IceSword Lab, Qihoo 360 Technology Co. Ltd., Scott Bauer, Derrek, Yuan-Tsung Lo and Xuxian Jiang of C0RE Team, Di Shen (@returnsme) of KeenLab (@keen_lab), Tencent
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus Player 0 Google Nexus 9 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Android 0
Not Vulnerable:

Google Android Qualcomm Components Multiple Security Vulnerabilities

Google Android is prone to multiple security vulnerabilities.

An attacker can leverage these issues to obtain sensitive information, and execute arbitrary code with elevated privileges in the context of the kernel. Failed exploit attempts may result in a denial of service condition.

Google Android Qualcomm Components Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android Qualcomm Components Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Qualcomm Components Multiple Security Vulnerabilities

References:

• Android Homepage (Google)
  
• app: aboot: add size check when flashing on NAND (Code Aurora)
  
• app: aboot: check for input image size for overflow (Code Aurora)
  
• ASoC: msm: qdsp6v2: check audio client pointer before accessing (Code Aurora)
  
• ASoC: msm: qdsp6v2: set pointer to NULL after free (Code Aurora)
  
• hid: usbhid: Changes to prevent buffer overflow (Code Aurora)
  
• msm-vidc: Allocate bus vote data during initialization (Code Aurora)
  
• msm: camera: sensor: Add boundary check for cci master (Code Aurora)
  
• msm: isp: fix for potentitial array out of bound access (Code Aurora)
  
• msm: ispif: fix a bug in checking the validity of vfe intf (Code Aurora)
  
• msm: kgsl: Fix kgsl memory allocation and free race condition (Code Aurora)
  
• msm: mdss: fix race condition during mdp debugfs release (Code Aurora)
  
• msm: sde: Add mutex lock for debug buffer access in rotator (Code Aurora)
  
• qcacld-2.0: Add bounday check for multicastAddr array (Code Aurora)
  
• QcomModulePkg: Combine duplicate code to a common place (Code Aurora)
  
• Qualcomm Homepage (Qualcomm)
  
• soc: qcom: Avoid possible buffer overflow in service-locator (Code Aurora)
  
• Android Security Bulletin�??July 2017 (Android)