Input validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2014-9988

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear SD 820A, IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 81...

CVE-2015-9177

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2015-9205

In CVE-2015-9205, a buffer over-read can occur in a PlayReady API function on Android devices with Qualcomm SD series (MSM8909W, SD210/SD212/SD205, SD410/12, SD615/16/SD415, SD808, SD810). The issue affects Android before 2018-04-05 or earlier patch levels; CVSS indicates a critical impact (high ...

CVE-2015-9186

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2015-9171

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A,...

CVE-2014-9987

The CVE-2014-9987 issue is an Android DRM API buffer over-read affecting Qualcomm Snapdragon platforms (MDM9206/9650 and various SD chips). Root cause is a DRM API buffer over-read in affected builds. Impact is high (CVE is listed as CRITICAL/HIGH in CVE notes) with potential confidentiality, int...

CVE-2015-9181

CVE-2015-9181 is a buffer over-read in a crypto API function affecting multiple Qualcomm Snapdragon platforms (Automobile, Mobile, Wear; SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835). Root cause is a memory over-read in the crypto API ...

CVE-2015-9171

CVE-2015-9171 describes a buffer over-read in OEMCrypto_Dash_InstallEncapKeybox() when keyBoxLength exceeds TZ_WV_MAX_DATA_LEN (20k) on various Qualcomm/Android components. Affected: Android devices with Qualcomm Snapdragon Automotive/Mobile/Wear stack listed in the description (multiple SoCs). R...

CVE-2015-9172

The CVE-2015-9172 issue affects Android platforms with WideVine API on Qualcomm Snapdragon families (Automotive, Mobile, Wear) including devices using SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835, 845, 850. In a WideVine API function, a bu...

CVE-2015-9172

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD...

CVE-2014-9987

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, S...

CVE-2014-9988

CVE-2014-9988 affects Android on Qualcomm Snapdragon devices (Automotive, Mobile, Wear, and listed SD families). Root cause: lack of input validation for message length leads to a buffer over-read in drm_app_encapsulate_save_keys. Impact: critical risk across confidentiality, integrity, and avail...

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

CVE-2014-9997

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 450, SD 625, SD 650/52, SD 808, and SD 810, lack of input validation i...

CVE-2015-9205

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, in a PlayReady API function, a buffer over-read can occur...

CVE-2015-9181

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, a...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

CVE-2014-10043

CVE-2014-10043 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, SD 400/410/12/800). The issue is a buffer over-read when reading PlayReady rights string information from a command buffer (sent from non-secure side) if the rights string length...