CVE-2017-18071

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, debug policy can potentially be bypassed...

CVE-2018-3594

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing ...

CVE-2017-11011

CVE-2017-11011 describes a Use-After-Free vulnerability in Android’s communication API affecting Qualcomm Snapdragon-based devices (including MDM9206/9607 and various SD/SoC tiers). Root cause: a use-after-free flaw in the communication API leads to potential arbitrary code execution. Impact per ...

CVE-2017-11011

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 835, a Use After Free condition can occur in a communication API...

CVE-2017-18126

CVE-2017-18126 affects Android on Qualcomm-based devices (e.g., Snapdragon/WLAN stacks) where the original mac spoofing feature in probe requests for cfg80211 scan, vendor scan, and pno scan did not use randomized sequence numbers or randomized source addresses. This privacy-related flaw could af...

CVE-2017-18140

CVE-2017-18140 affects Android on Qualcomm Snapdragon Automotive/Mobile/Wear platforms. The issue occurs when processing a call disconnection; an attempt to print the RIL token-id to the debug log can lead to a Use After Free condition if eMBMS is enabled, potentially enabling a network-initiated...

CVE-2017-18071

CVE-2017-18071 affects Android on Qualcomm Snapdragon/Mobile platforms (including MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 425/430/450/625/650/52) and is described as allowing a potential bypass of the debug policy prior to the 2018-04-05 patch level. The vulnerability is documented in the ...

CVE-2017-18142

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur...

CVE-2018-3594

CVE-2018-3594 affects Android devices using Qualcomm Snapdragon (Automobile, Mobile, Wear) where ID3 tag private frame parsing can trigger a buffer over-read during comparison of frame data to owner identifier strings. The issue is described as a buffer over-read in specific ID3 frame parsing pat...

CVE-2017-18138

CVE-2017-18138 describes a buffer overflow in GERAN within Android prior to the 2018-04-05 patch level on Qualcomm-based devices (various Snapdragon Mobile/Wear platforms listed). The vulnerability is triggered in a Qualcomm GERAN component and may potentially allow memory corruption. The Connect...

CVE-2018-3590

Technical details for CVE-2018-3590 are not publicly provided in the supplied documents. Monitor for updates; no concrete details (affected components, exploit info, or remediation) are included here.

CVE-2017-18146

CVE-2017-18146 affects Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear; various SDM/MDM/SD chips). In vulnerable builds prior to the 2018-04-05 patch level, ECDSA signature verification can fail in corner cases, potentially impacting message authentication. The issue is listed ...

Google Android Qualcomm Core Services Denial of Service Vulnerability

Google Android is a free and open source Linux-based operating system. A denial-of-service vulnerability exists in Google Android Qualcomm Core Services, which allows remote attackers to conduct denial-of-service attacks by submitting a special request using the vulnerability...

Information disclosure

An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References: QC-CR2029798...

Privilege escalation

An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. References: QC-CR2045061...

CVE-2017-0431

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899...

CVE-2017-0748

An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References: QC-CR2029798...

CVE-2017-0751

An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. References: QC-CR2045061...

Privilege escalation

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899...

CVE-2017-0751

CVE-2017-0751 is a local elevation-of-privilege vulnerability in the Qualcomm QCE driver affecting Android kernel. Affected component: QCE driver within the Android platform; vulnerable code path enables a privileged escalation. Exploitation status is not detailed in the provided documents. The v...