CVE-2015-9185

Technical details such as affected products, component, root cause, impact, and fixes are not publicly provided in the supplied documents; monitor for updates.

CVE-2015-9120

CVE-2015-9120 affects Android devices on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) prior to the 2018-04-05 patch level, where the Core detects an Error Condition Without Action. The issue is tied to multiple Snapdragon SoCs (e.g., IPQ4019, SD 210/212/205, 400/410/12, 425, 430, 450,...

CVE-2016-10420

CVE-2016-10420 affects Android devices with Qualcomm Snapdragon/mobile platforms listed (e.g., MDM9206/9607/9650 and SD family up to SDX20). The issue arises while playing a .flv clip that lacks an inbuilt seek table, where a dynamic index table access goes out of bounds, causing a crash (availab...

CVE-2014-9985

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior...

CVE-2015-9181

CVE-2015-9181 is a buffer over-read in a crypto API function affecting multiple Qualcomm Snapdragon platforms (Automobile, Mobile, Wear; SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835). Root cause is a memory over-read in the crypto API ...

CVE-2015-9124

CVE-2015-9124 affects Android devices with Qualcomm Snapdragon SoCs (MDM9625/9635M/9640/9645 and SD families 210/212/205, 400, 410/12, 615/16/415, 800, 808, 810). The issue can cause a crash or expose otherwise inaccessible memory contents when accessing an invalid pointer. The Android bulletin c...

CVE-2014-10046

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the...

CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9147

CVE-2015-9147 affects Android devices on Qualcomm Snapdragon platforms (MDM9625, MDM9635M, SD 400, SD 800) with patch levels before 2018-04-05. The flaw enables exploitation via userspace-provided pointer arguments that are not validated, as documented in the CVE description and corroborated by t...

CVE-2014-10063

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...

CVE-2014-10055

CVE-2014-10055 affects Android on Qualcomm Snapdragon Mobile SD 400/800 prior to 2018-04-05 patch level, describing potential leakage of protected contents if HLOS does not request security restoration for OCMEM xPU. The CVE entry provides CVSS metrics (2.0/5.0 and 3.0/7.5), indicating network/ve...

CVE-2015-9167

CVE-2015-9167 affects Qualcomm Snapdragon platforms (Automobile and Mobile) across SD 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, and 820A. Description: an integer underflow in an EMM command can occur. The issue is documented in multiple sources (NVD, CVE lists)...

CVE-2014-10063

CVE-2014-10063 affects Qualcomm-based Android devices (Qualcomm Snapdragon Mobile MDM9625 and SD 800). The fuse at secure boot was not blown correctly, per Android bulletin context. Impact is defined as a fault in the secure-fuse state; the issue is mitigated by the 2018-04-05 security patch leve...

CVE-2014-9995

CVE-2014-9995 (Android/Qualcomm) has concrete details in CNVD-2018-08827: A buffer overflow in drmprov_cmd_verify_key() on Qualcomm SD 400/800 affects Android versions before the 2018-04-05 patch level. The issue stems from not validating feature_name_length, with a potential integer wrap in the ...

CVE-2014-10047

Technical details about CVE-2014-10047 are not publicly available in the provided connected documents. The Initial Description notes an information leak when writing the Full Disk Encryption key on Qualcomm Snapdragon devices prior to 2018-04-05, but no deeper specifics are given.

CVE-2014-9996

CVE-2014-9996 affects Android devices with Qualcomm Snapdragon Mobile SD 400 and SD 800 preceding the 2018-04-05 patch level. The issue is a buffer overflow during provisioning verification, described across sources (including CNVD-2018-08828) as potentially enabling arbitrary code execution or D...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

Buffer overflow

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

DFARS 7012 Compliance

At Coalfire, we field a lot of questions from government contractors about compliance with National Institute of Science and Technology NIST Special Publication SP 800-171. We also address requests for help with "DFARS 7012," which is a commonly used shorthand for Defense Acquisition Regulation...