PT-2018-4507

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of validation of the return value prior to using it for buffer allocation in the QSEE application, TQS, which may result in memory overwrite...

PT-2018-4516

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to an integer overflow that may result in a buffer overflow when parsing the "Set Certificates" command in the TQS QSEE application on specific Qualcomm...

CVE-2015-9166: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808...

PT-2018-4134

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs when qsee app entry return is called without first calling qsee app entry, causing the stack to be restored to an older state and resulting in a return to a...

PT-2018-4496

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises in the Certificate CreateWithBuffer function within the QSEE app TQS on specific Qualcomm Snapdragon Mobile processors. When memory allocation fails, the...

PT-2018-4688

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is related to a lack of address argument validation in the qsee get tz app name function, which may lead to an untrusted pointer dereference. Recommendations For Android versions prior...

PT-2018-4450

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of address argument validation on calls to the qsee get secure state syscall in certain Qualcomm Snapdragon processors, including Automobile a...

PT-2018-4502

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A buffer over-read issue in the QSEE app may cause confidential information to be leaked. This issue affects devices with Qualcomm Snapdragon Mobile and Snapdragon Wear...

PT-2018-4449

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of address argument validation in the qsee fuse write function, which could lead to an untrusted pointer dereference. This affects Qualcomm...

CVE-2015-9113: NULL Pointer Dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, untrusted pointer dereference in QSEE Syscall without proper validation can lead to access of...

PT-2018-4452

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by a lack of input validation in QSEE, which can lead to a potential buffer overflow. This affects Qualcomm Snapdragon Automobile and Snapdragon Mobile...

PT-2018-4467

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation in qsee that can lead to unauthorized memory access. This affects devices with Qualcomm Snapdragon Mobile SD 400, SD 410/1...

CVE-2015-9183: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in TQS QSEE application, while parsing "Set Certificates" command an integer overflow may result in buffer overflow...

PT-2018-4500

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue concerns the DRM provisioning mechanisms in QSEE applications. These mechanisms have a feature to prevent further provisioning by creating an SFS file called...

PT-2018-4468

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a possible arbitrary memory read due to an untrusted pointer dereference when handling HLOS controlled values passed to the QSEE syscall helper. This...

PT-2018-4470

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs while processing QSEE Syscall 'qsee macc gen ecc privkey' in Android, resulting in an untrusted pointer dereference. This could lead to arbitrary write. The...

CVE-2015-9162: NULL Pointer Dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the function "CertificateCreateWithBuffer" in the QSEE app TQS, in case of memory allocation failure, we free the memory and return the pointer...

PT-2018-4454

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of address argument validation in the qsee query counter syscall, which could lead to an untrusted pointer dereference. This affects Qualcomm...

Authentication flaw

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin"...

CVE-2018-9995

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a “Cookie: uid=admin”...