CVE-2017-18133

CVE-2017-18133 affects Android on Qualcomm-based devices (Snapdragon Mobile/Wear). The issue is an out-of-bounds access in the ebi channel array, reported before the 2018-04-05 patch level. The Android bulletin for 2018-04-01/2018-04-05 indicates patches were released; devices with patch level 20...

CVE-2017-18137

CVE-2017-18137 is a high-severity vulnerability affecting Android on Qualcomm Snapdragon platforms (MDM9640/9645/9650/9655; SD 450/625/650/52/810/820/835) where, prior to the 2018-04-05 patch level, processing the IPv6 PDP address of a PDP context could trigger a buffer overflow. The publicly doc...

CVE-2017-18074

CVE-2017-18074 affects Android on Qualcomm Snapdragon devices (mobile and Wear) before the 2018-04-05 security patch level. When playing a .wma file with a modified media header that has a non-standard bytes-per-second value, a reachable assert may occur in affected media components. According to...

CVE-2017-18136

CVE-2017-18136 concerns a Use After Free condition in the Android omx aac component affecting Qualcomm platforms (Snapdragon Automobile, Mobile, Wear; various SD/MDM chips). The issue is triggered in the omx aac component and may potentially allow a remote attacker to exploit it, with the CVSS in...

CVE-2018-3591

CVE-2018-3591 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to the 2018-04-05 patch level. The root cause is that the default BOOT.BF.3.0 device programmer configuration enables the SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM flag, which exposes peek and pok...

CVE-2018-3589

CVE-2018-3589 is a buffer overflow in Android prior to the 2018-04-05 patch level on Qualcomm Snapdragon/MDM9650/9655 and chipsets SD835/845/850. The root cause is a vswr capture size larger than the maximum diag logPacket size, which can overflow when the sample buffer is copied to logPacket. Pu...

CVE-2018-3592

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if...

CVE-2017-18143

CVE-2017-18143 affects Android on Qualcomm Snapdragon Mobile (SD 845/SD 850) prior to the 2018-04-05 security patch level. The issue reports that PD dumps were collected on a secure device even when debugging was not enabled, indicating a data leakage risk from the Qualcomm closed-source componen...

CVE-2017-18143

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are collected when debugging is not enabled...

CVE-2017-18139

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 81...

CVE-2017-18140

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD...

CVE-2017-18144

CVE-2017-18144 affects Android on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, 450, 615/16, 625, 650/52, 820, 835, 845) prior to the 2018-04-05 patch. The issue occurs when processing retransmissions of WPA supplicant command send failures: if transmission fails, a U...

CVE-2017-18145

CVE-2017-18145 describes a Use-After-Free condition in the DPM native process while handling Android framework events on Qualcomm Snapdragon platforms. The underlying issue is that an iterator pointer is deleted after an event is processed, which can cause a Use After Condition during processing ...

CVE-2017-18126

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD...

CVE-2017-18125

CVE-2017-18125 affects Android on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 835/845/850) before the 2018-04-05 patch level. The issue arises when secure camera is active: captured data is stored in protected buffers, but the HLOS can reuse one ...

CVE-2017-18125

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera...

CVE-2017-18127

CVE-2017-18127 affects Android on Qualcomm Snapdragon devices (before 2018-04-05 patch level) where, while processing a SetParam command packet in the VR service, the code does not validate the extracted name_len and value_len values, potentially leading to a buffer overflow in subsequent calls t...

CVE-2017-18127

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted namelen and valuelen values ar...

CVE-2017-18135

CVE-2017-18135 is a buffer overflow in Android’s Wireless Data Service (WDS) module affecting Qualcomm Snapdragon platforms (e.g., MDM9650/9655, SD 450/625/650/52/835/845/850). The issue exists in Android releases prior to the 2018-04-05 patch level, as described in the CVE and corroborated by CN...

CVE-2017-18137

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while processing the IPv6 pdp address of the pdp context, a buffer overflow can occur...