CVE-2015-9161

CVE-2015-9161 describes a TOCTOU-induced buffer overflow in playready_reader_bind() affecting Android on Qualcomm Snapdragon platforms (MSM8909W; SD 210/212/205; SD 400; SD 410/12; SD 615/16/SD 415; SD 617; SD 650/52; SD 800; SD 808; SD 810). Affected Android versions are before the 2018-04-05 se...

CVE-2015-9134

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qseemaccgeneccprivkey', untrusted pointer dereference occurs, which could result in arbitrary write...

CVE-2015-9138

CVE-2015-9138 affects Android devices with Qualcomm-based SoCs. The issue arises when performing RSA encryption: the ce_util_to_unsigned_bin function uses the input address (c) instead of the buffer size, which can cause a logic overrun and potentially a buffer overflow. The vulnerability is desc...

CVE-2015-9189

The CVE-2015-9189 issue affects Android devices with Qualcomm Snapdragon SoCs (e.g., IPQ4019, MDM9xxx, SD 210/212/205, SD 400/410/12, SD 600/615/16/SD 415, SD 808, SD 810) prior to the 2018-04-05 patch level. The root cause is a vulnerability in the TZ application command handling (tz_app_cmd_han...

CVE-2015-9196

CVE-2015-9196 affects Android on Qualcomm Snapdragon Mobile and Small Cell SoCs (FSM9055, MDM9635M, SD 400, SD 800). Root cause: improper input validation in tzbsp_ocmem can lead to privilege escalation. Impact: high/critical across network attack vector with no user interaction required (per CVS...

CVE-2015-9205

In CVE-2015-9205, a buffer over-read can occur in a PlayReady API function on Android devices with Qualcomm SD series (MSM8909W, SD210/SD212/SD205, SD410/12, SD615/16/SD415, SD808, SD810). The issue affects Android before 2018-04-05 or earlier patch levels; CVSS indicates a critical impact (high ...

CVE-2015-9179

The CVE-2015-9179 issue affects Android devices with Qualcomm MSM8974 components. The vulnerability arises from lack of length checking in OEMCrypto_DeriveKeysFromSessionKey(), enabling a buffer overflow. The description in publicly referenced sources specifies impact on Android before the 2018-0...

CVE-2015-9109

The CVE-2015-9109 issue concerns Android devices using Qualcomm Snapdragon Automotive and Snapdragon Mobile MDM9625, SD 425/430/450/625/650/52/820/820A. The root cause is lack of address-argument validation in the inqsee_fuse_write path, which could lead to an untrusted pointer dereference. Conne...

CVE-2015-9161

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, TOCTOU condition could lead to a buffer overflow in function...

CVE-2015-9164

The CVE-2015-9164 issue is a buffer overread in Playready caused by insufficient input validation of the buffer size provided by the HLOS, affecting multiple Qualcomm-based Android devices (e.g., Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear MSM8909W and various SD versions). The prac...

CVE-2015-9171

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A,...

CVE-2015-9132

CVE-2015-9132: In Android on Qualcomm Snapdragon mobile/Small Cell SoCs (FSM9055 and SD variants listed) prior to the 2018-04-05 patch level, there is an arbitrary memory read due to an untrusted pointer dereference when handling HLOS-controlled values passed to the QSEE syscall helper. Affected ...

CVE-2015-9115

CVE-2015-9115 affects Android on Qualcomm Snapdragon platforms (Automotive and Mobile MDM9625 and several Snapdragon 410/12/425/430/450/615/16/415/617/625/650/52/820/820A). The root cause is missing validation of the address argument in the qsee_prng_getdata syscall, enabling potential misuse. Re...

CVE-2015-9188

The CVE-2015-9188 issue concerns Qualcomm/Android devices where, before the 2018-04-05 patch level, the Secure DEMUX command handler may write an error code into a response buffer without validating the buffer length, risking memory corruption. Affected products include various Snapdragon Automot...

CVE-2015-9208

CVE-2015-9208 affects Android on Qualcomm Snapdragon devices (various SoCs listed). The vulnerability arises because tzbsp_pil_verify_sig() does not strictly constrain the ELF/program headers and hash segment pointers to secure memory; it only ensures addresses are not in non-secure memory, allow...

CVE-2015-9204

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, if cchFriendlyName is greater than TZPRMAXNAMELEN in function playreadyleavedomaingeneratechallenge, a...

CVE-2015-9131

CVE-2015-9131 corresponds to an input validation flaw in Qualcomm’s qsee on Android devices, affecting Snapdragon targets (SD 400/410/12, 615/16/SD 415, 800, 808, 810). The issue can enable unauthorized memory access due to lack of input validation. Public details in the connected documents show ...

CVE-2015-9118

CVE-2015-9118 affects Android systems with Qualcomm ADSP QDI Root-PD driver in Snapdragon SoCs (e.g., MDM9615/9625/9635M; SD 400/410/12/615/16/SD 415/800/808/810). The vulnerability arises from untrusted arguments from User PD that may cause integer overflow, leading to a buffer overflow. This is...

CVE-2015-9201

CVE-2015-9201 describes an integer overflow in tzbsp that can lead to privilege escalation on multiple Qualcomm Snapdragon/Android platforms (Automotive, Mobile, Wear, and related SoCs). The affected components and devices span Qualcomm’s tzbsp-related code paths used in Snapdragon lines (e.g., I...

CVE-2015-9145

CVE-2015-9145 affects Android devices with Qualcomm Snapdragon automotive/mobile/wear platforms (e.g., MDM92xx, SDxx family). The issue arises from a lack of input validation in NPA driver functions, enabling a null pointer dereference. Public details confirm the affected product families and pat...