Lucene search
+L

35968 matches found

Cvelist
Cvelist
added 2018/04/18 2:00 p.m.44 views

CVE-2015-9156

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, when making a high speed Dual Carrier...

9.9AI score0.01137EPSS
SaveExploits0References2
CVE
CVE
added 2018/04/18 2:00 p.m.64 views

CVE-2015-9159

CVE-2015-9159 affects Android devices with Qualcomm Snapdragon/mobile/wear chipsets prior to the 2018-04 patch, where the input validation gap in OEMCrypto_GetRandom can cause a potential buffer overflow. The CVE entry describes the issue as present on a wide range of Snapdragon platforms (Automo...

10CVSS8.6AI score0.01189EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.81 views

CVE-2015-9198

Summary of CVE-2015-9198 : An integer underflow in the Qualcomm qsee_register_log_buff function allows writing beyond intended bounds, potentially corrupting secure memory. The public records identify affected Android builds on Qualcomm-based devices (e.g., Snapdragon Automobile, Snapdragon Mobil...

10CVSS8.5AI score0.01052EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/04/18 2:00 p.m.35 views

CVE-2015-9199

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, and SD 820A, A non-secure region...

9.9AI score0.01052EPSS
SaveExploits0References2
CVE
CVE
added 2018/04/18 2:00 p.m.60 views

CVE-2015-9194

CVE-2015-9194 affects Android on Qualcomm Snapdragon mobile platforms (SD 210/212/205, 400, 425, 427, 430, 435, 450, 617, 625, 650/652, 800, 845, Snapdragon_High_Med_2016). During TZ Startup module load, memory statically allocated by modules was not set to zero, allowing a module to run without ...

7.5CVSS7.8AI score0.00731EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.68 views

CVE-2015-9195

CVE-2015-9195 affects Android (pre-2018-04-05 patch level) on Qualcomm Snapdragon platforms (MDM9625/9635M/9650/9655; SD 400/410–12/615/16/415/617/650/52/808/810; SDX20) where a QTEE syscall handler can trigger a buffer overflow in the High-Level OS (HLOS). The issue is rooted in the QTEE syscall...

10CVSS8.7AI score0.01137EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.73 views

CVE-2015-9110

CVE-2015-9110 is described in the connected CNVD/NVD entries as: on Android, before the 2018-04-05 security patch level, Qualcomm closed‑source components (Qualcomm Snapdragon Mobile/Automotive) did not validate the address parameter in the qsee_get_secure_state syscall. The root cause is the mis...

10CVSS8.5AI score0.01108EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.68 views

CVE-2015-9108

The CVE-2015-9108 entry relates to Android devices with Qualcomm QSEE components. The vulnerability is triggered in scenarios where there is insufficient address-argument validation when calling a QSEE syscall, potentially allowing an attacker to perform arbitrary read/write operations or trigger...

10CVSS8.5AI score0.01037EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.59 views

CVE-2015-9151

CVE-2015-9151 affects Android devices with Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800 prior to the 2018-04-05 security patch level. The issue is that userspace-provided pointer arguments are not validated, as described in the CVE entry. The NVD listing assigns a CVSSv3 base ...

10CVSS8.6AI score0.01123EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.60 views

CVE-2015-9148

CVE-2015-9148 is an Android vulnerability affecting Qualcomm-based devices (Android versions affected prior to 2018-04-05 patch level) where the Diag User-PD command registration function does not validate a length value used for buffer allocation. If a very large length is processed, this can tr...

10CVSS8.8AI score0.01137EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.64 views

CVE-2015-9149

CVE-2015-9149 affects Android devices with Qualcomm Snapdragon chipsets (Automotive/Mobile/Wear families). In a DIAG ioctl handler , an untrusted pointer dereference could occur, enabling high-severity impact per CVSS (network, 3.0: 9.8). Provider details show a critical, remote-executable risk, ...

10CVSS8.4AI score0.011EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.59 views

CVE-2015-9129

CVE-2015-9129 affects Android devices using Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) where the TZ_PR_CMD_CONTENT_SET_PROP size parameter can cause an integer underflow when small. The issue’s impact is described as high to critical in CVSS terms, with potential remote/privilege im...

10CVSS8.4AI score0.01028EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.68 views

CVE-2015-9124

CVE-2015-9124 affects Android devices with Qualcomm Snapdragon SoCs (MDM9625/9635M/9640/9645 and SD families 210/212/205, 400, 410/12, 615/16/415, 800, 808, 810). The issue can cause a crash or expose otherwise inaccessible memory contents when accessing an invalid pointer. The Android bulletin c...

9.1CVSS8.3AI score0.00907EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.63 views

CVE-2015-9127

CVE-2015-9127 affects Android devices with Qualcomm Snapdragon platforms (e.g., MSM8909W, SD 210/212/205, 400/410/12/16, 415, 810) where a large buffer allocation in the Playready App can trigger a null pointer dereference due to memory allocation failure. This is described as a vulnerability in ...

10CVSS8.5AI score0.01117EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.75 views

CVE-2015-9137

CVE-2015-9137 describes a vulnerability in Android where, on Qualcomm Snapdragon platforms (various models listed), several EFS2 DIAG command handlers fail to call fs_diag_access_check(), due to an insufficient access-control check in the DIAG path. The issue is triggered on Android devices using...

7.5CVSS8AI score0.00644EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.70 views

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

10CVSS8.6AI score0.011EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/04/18 2:00 p.m.43 views

CVE-2015-9178

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

10AI score0.01034EPSS
SaveExploits0References2
CVE
CVE
added 2018/04/18 2:00 p.m.65 views

CVE-2015-9182

Technical details about CVE-2015-9182 (affected Qualcomm Android components, exact versions, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from NVD/Android bulletins for concrete impact and remediation.

10CVSS8.6AI score0.01123EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.68 views

CVE-2015-9160

CVE-2015-9160 affects Qualcomm‑based Android devices (Snapdragon) prior to 2018-04-05 SPLs, where an integer overflow may occur in TZBSP_GFX_DCVS_UPDATE_ID when HLOS graphics driver busy time and total time values are very large. The issue is documented in NVD with a CVSS v3.0 base score of 9.8 (...

10CVSS8.6AI score0.01052EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/04/18 2:00 p.m.73 views

CVE-2015-9157

CVE-2015-9157 describes a race-condition in Android Qualcomm widevine support where rsp buffers passed to widevine commands in widevine_dash_cmd_handler() can be read or overflowed due to memory not being locked during time-of-check/time-of-use. Affected are Android devices with Qualcomm Snapdrag...

10CVSS8.5AI score0.00961EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder