In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases: 25 records in one advisory

25 records announced together, published 2018-03-16, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://source.android.com/security/bulletin/pixel/2018-03-01. That is the CNA's own reference, held in the index, and it is why these records are on one page.

Every CVE we hold for Android

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

Every record names something of its own, listed against it below.

What this page does not cover

This batch is 25 of the 36 records that cite the same advisory. The other 11 are different findings announced alongside it.

None of those 11 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2017-11074obsolete set/reset ssid hotlist

CVE-2017-11082loading routine multiple space

CVE-2017-14887messages type ewni_sme_modify_additional_ies leading

CVE-2017-14889lack range into wmi

CVE-2017-15814msm_flash_subdev_do_ioctl drivers/media/platform/msm/camera_v2/sensor/flash/msm_flash.c flash_data.cfg_type…

CVE-2017-15830ch_list initialization sme_set_plm_request

CVE-2017-15831wma_ndp_end_indication_event_handler no event_info value

CVE-2017-15833untrusted pointer dereference update_userspace_power

CVE-2017-15834diag_dbgfs_read_dcistats accessing diag_dbgfs_dci_data_index

CVE-2017-18050vdev_map wma_tbttoffset_update_event_handler

CVE-2017-18051event->vdev_id wma_rcpi_event_handler

CVE-2017-18052cmpl_params->num_reports param_buf->desc_ids param_buf->status wma_mgmt_tx_bundle_completion_handler

CVE-2017-18053fix_param->vdev_id wma_p2p_lo_event_handler

CVE-2017-18054num_vdev_mac_entries wma_pdev_hw_mode_transition_evt_handler

CVE-2017-18055wmi_event->num_vdev_mac_entries wma_pdev_set_hw_mode_resp_evt_handler

CVE-2017-18057wma_nlo_scan_cmp_evt_handler

CVE-2017-18058wow_buf_pkt_len wma_wow_wakeup_host_event

CVE-2017-18059wma_scan_event_callback

CVE-2017-18060resp_event->vdev_id wma_unified_bcntx_status_event_handler

CVE-2017-18061aoa measurement wigig wil_aoa_evt_meas

CVE-2017-18062utf wma_process_utf_event

CVE-2017-18065vent->vdev_id wma_action_frame_filter_mac_event_handler code

CVE-2017-18066controls core it freed

CVE-2018-3560double exists audio opening

CVE-2018-3561diag_ioctl_lsm_deinit

25 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.