Qualcomm Critical Flaw Exposes Private Keys For Android Devices

Researchers have uncovered a side-channel attack that enables a bad actor to extract sensitive data from Qualcomm’s secure keystore. The critical flaw impacts most modern Android devices that use Qualcomm chips. The issue stems from an issue in Qualcomm technology, dubbed the Qualcomm Secure...

CVE-2018-11958

Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650,...

CVE-2018-11958

Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650,...

CVE-2018-13918

CVE-2018-13918 is a kernel-level buffer overflow affecting Qualcomm platforms (e.g., Snapdragon Auto/Consumer IoT/Industrial IoT, Mobile, Wearables; MDM9150/MDM9206/MDM9607/MDM9650, MSM8909W, QCS605, SD/SDM series, SM7150) where the kernel may return a received message length longer than expected...

CVE-2018-13918

kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607,...

Google Android Qualcomm Closed Source Component Authentication Error Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An authentication error vulnerability exists in the Qualcomm closed source component in Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm closed source component integer overflow vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in the Qualcomm closed source component in Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm Closed Source Component Buffer Overflow Vulnerability (CNVD-2019-24144)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A closed-source component buffer overflow vulnerability exists in the Qualcomm closed-source component in Android. An attacker could exploit this vulnerability to cause a buffer overflow when...

Google Android Qualcomm Closed Source Component Encryption Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A cryptographic vulnerability exists in the Qualcomm closed-source component of Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm Closed Source Component Access Privilege Control Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An access control privilege vulnerability exists in the Qualcomm closed source component in Android. An attacker can exploit the vulnerability to potentially disable input validation of the skel...

Unspecified Vulnerability in Google Android Qualcomm Closed Source Component (CNVD-2019-24154)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An unspecified vulnerability exists in the Qualcomm closed-source component of Android. An attacker can exploit this vulnerability by issuing a flipchart call to suspend the system...

Google Android Qualcomm Closed Source Component Information Disclosure Vulnerability (CNVD-2019-24150)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Qualcomm closed-source component of Android. The vulnerability can be exploited by an attacker to access sensitive data...

Google Android Qualcomm Closed Source Component Information Disclosure Vulnerability (CNVD-2019-24157)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the Qualcomm closed-source component of Android. The vulnerability can be exploited by an attacker to access sensitive data...

Google Android Qualcomm Closed Source Component Buffer Overflow Vulnerability (CNVD-2019-24156)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the Qualcomm closed source component in Android. No details of the vulnerability are provided at this time...

Google Android Memory Misreference Vulnerability (CNVD-2019-24141)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A memory misreference vulnerability exists in the Qualcomm closed-source component in Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm Closed Source Component Access Control Error Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An access control vulnerability exists in the Qualcomm closed-source component of Android. An attacker could exploit the vulnerability to cause a provider to have no access to the phone...

Google Android Buffer Overflow Vulnerability (CNVD-2019-24163)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the Qualcomm closed source component in Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm Closed Source Component Input Validation Error Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An input validation error vulnerability exists in the Qualcomm closed source component in Android. An attacker can exploit this vulnerability to write arbitrary memory addresses passed by the use...

Google Android Qualcomm Closed Source Component Buffer Overflow Vulnerability (CNVD-2019-24149)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the Qualcomm closed source component in Android. No details of the vulnerability are provided at this time...

Google Android Qualcomm closed-source component integer overflow vulnerability (CNVD-2019-24146)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in the Qualcomm closed source component in Android. An attacker can exploit this vulnerability to integer overflow untrusted fields in GNSS XTRA3...