CVE-2015-9215

CVE-2015-9215 describes a null pointer dereference in the USB bootloader find_ep() on Qualcomm Snapdragon Mobile SKUs (e.g., MDM9615, MDM9625, MDM9635M, SD 810) due to improper input validation. Affected platforms include Android builds prior to the 2018-04-05 patch level. The issue is rated CRIT...

PT-2018-1251

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810 affected versions not specified Description The issue is related to the find ep function in the Qualcomm USB Bootloader...

CVE-2017-5947

An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboot the device into the Qualcomm Emergency Download EDL mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as...

CVE-2017-5947

An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboot the device into the Qualcomm Emergency Download EDL mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as...

Code injection

An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboot the device into the Qualcomm Emergency Download EDL mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as...

CVE-2017-5947: Undefined Security Weakness

An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboot the device into the Qualcomm Emergency Download EDL mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as...

The vulnerability of the Bootloader component of Android operating systems from the CAF repository allows a hacker to trigger buffer overflows.

The vulnerability of the bootloader component of Android operating systems from the CAF repository arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to trigger buffer overflows by manipulating data relate...

CVE-2017-13247

In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

Design/Logic Flaw

In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

CVE-2017-13247

CVE-2017-13247 affects the Pixel 2 bootloader (Android). The issue is a missing permission check in the bootloader that bypasses the carrier bootloader lock, enabling local elevation of privileges with user-privilege requirements. Exploitation is described as local with no user interaction requir...

CVE-2017-13247

In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

PT-2018-5534

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing permission check in the Pixel 2 bootloader, which can bypass the carrier bootloader lock. This could lead to local elevation of privileges, with user execution privileges needed fo...

CVE-2017-13247: Missing Authorization

In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

Google Android HTC Component Information Disclosure Vulnerability (CNVD-2018-03847)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which HTC bootloader is a bootloader. An information disclosure vulnerability exists in the HTC bootloader in Android, which stems from the fact that the debugging function can ...

Google Android HTC Component Local Elevation of Privilege Vulnerability

Android on Google Pixel 2 is a Linux-based open source operating system for the Google Pixel 2 developed by Google and the Open Handset Alliance OHA.Bootloader is one of the bootloader programs. Bootloader in Android on Google Pixel 2 devices suffers from a local elevation of privilege...

Google Android Qualcomm Bootloader Elevation of Privilege Vulnerability (CNVD-2018-01110)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Bootloader is a bootloader developed by Qualcomm using the Qualcomm Bootloader is a bootloader developed by...

Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-01112)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Bootloader is a bootloader developed by Qualcomm using the Qualcomm Bootloader is a bootloader developed by...

CVE-2017-13217

In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege enabling code execution as a privileged process with no additional execution...

CVE-2017-13217

In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege enabling code execution as a privileged process with no additional execution...

Google Android Qualcomm Bootloader Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Bootloader is a Qualcomm-developed bootloader used in it. An information disclosure vulnerability exists in the Qualcomm Bootloader in Android. An attacker can exploi...