Malicious code in qdi-zhichang-yinan-quanmou-baodian (npm)

The package qdi-zhichang-yinan-quanmou-baodian was found to contain malicious code...

MAL-2025-45670 Malicious code in qdi-zhichang-yinan-quanmou-baodian (npm)

The package qdi-zhichang-yinan-quanmou-baodian was found to contain malicious code...

Qualcomm Android Memory Corruption

The vulnerability of the Qualcomm Android operating system arises from operations that occur outside the buffer in memory when processing requests through the QDI interface. Exploiting this vulnerability allows a malicious actor to trigger memory corruption by using a specially crafted request...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SDM630, SDM636, SDM660, and...

Integer overflow

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrusted arguments from User PD may cause integer overflow resulting in buffer...

CVE-2015-9118

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrusted arguments from User PD may cause integer overflow resulting in buffer...

CVE-2015-9146: Improper Input Validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing i...

CVE-2015-9142: Incorrect Access of Indexable Resource

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SDM630, SDM636, SDM660, and...

CVE-2015-9118: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrusted arguments from User PD may cause integer overflow resulting in buffer...

PT-2018-4689

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A buffer overflow issue occurs when a negative value is passed as the argument max to the function qurt qdi state local new handle from obj. This happens due to the...

PT-2018-4478

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a missing bounds check for the vtable index in the DAL-TO-QDI conversion framework, which affects various Qualcomm Snapdragon Mobile processors...

PT-2018-4457

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by untrusted arguments from User PD in ADSP's QDI Root-PD driver, which may result in an integer overflow and subsequently a buffer overflow. This occurs...

CVE-2016-10493: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810,...

PT-2018-4482

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises when QDI read, write, or ioctl are called, and the passed-in pointer is not properly validated before accessing it for the delayed response. This occurs on...

PT-2018-1202

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is caused by NPA routines on the rootPD that handle resource requests remoted over QDI, which may not validate pointers passed from user space, resulting in guest OS memory corruption...