CVE-2015-9162

CVE-2015-9162 – Mode C summary : The issue affects Android devices with Qualcomm QSEE “Certificate_CreateWithBuffer” handling. When memory allocation fails, the code frees the memory but returns the original pointer without setting it to NULL, creating a potential use-after-free scenario in TQS. ...

CVE-2015-9194

CVE-2015-9194 affects Android on Qualcomm Snapdragon mobile platforms (SD 210/212/205, 400, 425, 427, 430, 435, 450, 617, 625, 650/652, 800, 845, Snapdragon_High_Med_2016). During TZ Startup module load, memory statically allocated by modules was not set to zero, allowing a module to run without ...

CVE-2016-10469

CVE-2016-10469: In Android (pre-2018-04-05 SPL) on Qualcomm Snapdragon platforms, RSA padding functions in CORE were incorrectly implemented, enabling information exposure. Affected: Android devices with Qualcomm Snapdragon Automotive/mobile/wear SoCs listed; impact described as High for confiden...

CVE-2015-9203

CVE-2015-9203 describes a buffer overread caused by missing input validation in playready_set_domainid on a wide range of Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) and various Snapdragon SoCs. This affects Android versions up to the 2018-04-05 security patch level; the issue is doc...

CVE-2016-10407

CVE-2016-10407 affects Android platforms prior to the 2018-04-05 patch level, involving an integer overflow that can trigger a buffer overflow during a VT call on Qualcomm Snapdragon Mobile SoCs (SD 210/212/205, 400, 410/12, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820, 835). Af...

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

CVE-2016-10457

CVE-2016-10457 affects Android on Qualcomm Snapdragon-based devices (multiple SoCs listed) where an app requests more permissions than required. The issue is described as a permission overreach with a high-impact risk profile (CVSS v3: 9.8, Network, No user interaction) and is documented for Andr...

CVE-2016-10490

CVE-2016-10490 is a buffer overflow vulnerability in Android devices with Qualcomm Snapdragon SoCs (including Snapdragon Automobile, Mobile, Wear, and various SD/MDM models) triggered when a negative value is passed as the argument max to qurt_qdi_state_local_new_handle_from_obj. The root cause i...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2016-10484

CVE-2016-10484 describes a buffer underflow in RPMB transfer size calculation when a RPMB listener uses a very small buffer, leading to buffer overflow on affected Qualcomm Snapdragon platforms (Android devices with RPMB support). The issue is triggered during read/write operations and is tied to...

CVE-2016-10456

CVE-2016-10456 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (numerous SoCs listed in the description). The issue arises when the radish component is run with an invalid network interface name, allowing an arbitrary command of up to 15 characters to be executed as a ...

CVE-2014-10053

CVE-2014-10053 relates to a Widevine-related data access validation issue in Android on Qualcomm Snapdragon platforms (automotive, mobile, wearables) prior to the 2018-04-05 security patch level. The description specifies that data access was not properly validated within the Widevine secure appl...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...

CVE-2015-9182

Technical details about CVE-2015-9182 (affected Qualcomm Android components, exact versions, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from NVD/Android bulletins for concrete impact and remediation.

CVE-2015-9186

CVE-2015-9186 affects Android on Qualcomm Snapdragon family (automobile, mobile, wearables) and several SoCs (e.g., SD 210/212/205, 400/410, 425/430/450, 615/625/650/52, 800/808/810/820/835/845, 850) where a buffer over-read can occur in a PlayReady API function. The issue is documented with a hi...

CVE-2015-9157

CVE-2015-9157 describes a race-condition in Android Qualcomm widevine support where rsp buffers passed to widevine commands in widevine_dash_cmd_handler() can be read or overflowed due to memory not being locked during time-of-check/time-of-use. Affected are Android devices with Qualcomm Snapdrag...

CVE-2016-10449

CVE-2016-10449 affects Android on Qualcomm Snapdragon devices (GNSS API) where, prior to the 2018-04-05 patch level, a NULL pointer dereference in GNSS API functions could occur. The issue is associated with Snapdragon Mobile and Wear platforms (e.g., MDM9206/9607/9640/9650, MSM8909W, SD 210–835 ...

CVE-2015-9160

CVE-2015-9160 affects Qualcomm‑based Android devices (Snapdragon) prior to 2018-04-05 SPLs, where an integer overflow may occur in TZBSP_GFX_DCVS_UPDATE_ID when HLOS graphics driver busy time and total time values are very large. The issue is documented in NVD with a CVSS v3.0 base score of 9.8 (...

CVE-2015-9128

CVE-2015-9128 describes a buffer overread caused by lack of validation of the buffer size in Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) across multiple SD/x variants. The issue affects devices with Android before the 2018-04-05 security patch level and is addressed by the...

CVE-2016-10474

Technical details about CVE-2016-10474 are not publicly available in the provided connected documents. The initial description references a buffer-length overflow in RIL handling, but there are no vendor, product, version, or mitigation specifics available here. Monitor for updates.