CVE-2016-10485

CVE-2016-10485 is a buffer overflow vulnerability described as due to lack of proper bounds checking in Android on Qualcomm Snapdragon/mobile components (lists include IPQ4019, MDM9xxx, MSM8xxx, SD 210/212/205, SD 400/410/12, SD 615/16/415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SDX20). The w...

CVE-2016-10485

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, ...

CVE-2016-10486

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 820A, PD failure reason string from user PD is used directly in root PD, s...

CVE-2016-10482

CVE-2016-10482 affects Android devices on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to 2018-04-05 (or earlier patch levels). The issue occurs while processing downlink information, where an assert can be reached. Affected families include MDM9206/9607/9625/9635M/9640/9645/965...

CVE-2016-10482

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...

CVE-2016-10483

CVE-2016-10483 affects Android devices with Qualcomm Snapdragon Mobile SoCs (SD 410/12, SD 615/16, SD 415, SD 808, SD 810). Root cause is improper input validation while processing SCM Command, leading to unauthorized memory access. According to the Android bulletin, these issues were addressed w...

CVE-2016-10461

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of proper bounds checking may lead to a buffer overread...

CVE-2016-10462

CVE-2016-10462 affects Android platforms with Qualcomm SoCs where HLOS Access Control policy could allow access to Slimbus, GPU, and GIC resources due to insufficient isolation in certain Snapdragon generations (e.g., SD 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 808, 810, 820/8...

CVE-2016-10466

CVE-2016-10466 affects Android devices with Qualcomm Snapdragon mobile platforms (various Snapdragon families listed in the description). The vulnerability arises during SSL/TLS handshakes: if the RNG function (crypto API) returns an error, the SSL implementation uses a hard-coded random value, p...

CVE-2016-10459

CVE-2016-10459 describes a memory exhaustion issue in Android devices during calls on Qualcomm Snapdragon platforms (various MDM and SD families). The vulnerability affects Android builds before the 2018-04-05 patch level (and older patch levels). Root cause is memory exhaustion during call handl...

CVE-2016-10460

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 835, SD 845, and SD 850, vendor specific opcodes may not have any packet length validation leading to buffer over-reads...

CVE-2016-10471

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, an unsigned RTIC health report susceptible to tampering by malware executing in the context of the HLOS may be...

CVE-2016-10472

CVE-2016-10472 affects Qualcomm Snapdragon mobile and wearable SoCs (e.g., MDM9206/9607/9650, MSM8909W, SD 210/212/205, 400, 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835, SDX20). Root cause: HLOS kernel failed to check address and size passed to TZ_INFO_GET_SE...

CVE-2016-10472

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...

CVE-2016-10471

CVE-2016-10471 affects Android on Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 425/430/450/625/650/52/820/820A). The issue is an unsigned RTIC health report that can be tampered with by malware executing in the context of the HLOS, potentially enabling unauthorized modificat...

CVE-2016-10473

The CVE-2016-10473 entry describes a buffer overflow in a Qualcomm Snapdragon-based Android platform's supplementary services function, affecting Android versions prior to patch levels 2018-04-01/2018-04-05. Affected devices include Snapdragon Mobile and Snapdragon Wear families (e.g., MDM9206, M...

CVE-2016-10411

CVE-2016-10411 affects Android devices with Qualcomm Snapdragon SoCs (SD 210/212/205, 400, 410/12, 430, 450, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835). The vulnerability lies in the RTP daemon’s RTCP packet handling; a parser misinterprets an unknown RTCP APP packet, causing the pack...

CVE-2016-10411

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 835, RTP daemon crashes and terminates VT call when UE receives...

CVE-2016-10414

CVE-2016-10414 affects Android devices using Qualcomm Small Cell SoCs (and related Snapdragon/SD variants) where passing a hash with zero datalength causes the code to return an error, even though zero length is valid. Connected sources confirm the issue and map it to a broad set of Qualcomm/Andr...

CVE-2016-10414

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD...