CVE-2014-9996

CVE-2014-9996 affects Android devices with Qualcomm Snapdragon Mobile SD 400 and SD 800 preceding the 2018-04-05 patch level. The issue is a buffer overflow during provisioning verification, described across sources (including CNVD-2018-08828) as potentially enabling arbitrary code execution or D...

CVE-2014-10046

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the...

CVE-2014-9995

CVE-2014-9995 (Android/Qualcomm) has concrete details in CNVD-2018-08827: A buffer overflow in drmprov_cmd_verify_key() on Qualcomm SD 400/800 affects Android versions before the 2018-04-05 patch level. The issue stems from not validating feature_name_length, with a potential integer wrap in the ...

CVE-2014-10063

CVE-2014-10063 affects Qualcomm-based Android devices (Qualcomm Snapdragon Mobile MDM9625 and SD 800). The fuse at secure boot was not blown correctly, per Android bulletin context. Impact is defined as a fault in the secure-fuse state; the issue is mitigated by the 2018-04-05 security patch leve...

CVE-2016-10489

CVE-2016-10489 affects Android devices with Qualcomm Snapdragon Mobile (SD 400) on affected patch levels prior to 2018-04-05. The vulnerability arises from lack of address argument validation in qsee_get_tz_app_name(), which can lead to an untrusted pointer dereference. The Android Bulletin for 2...

CVE-2015-9147

CVE-2015-9147 affects Android devices on Qualcomm Snapdragon platforms (MDM9625, MDM9635M, SD 400, SD 800) with patch levels before 2018-04-05. The flaw enables exploitation via userspace-provided pointer arguments that are not validated, as documented in the CVE description and corroborated by t...

CVE-2014-10047

Technical details about CVE-2014-10047 are not publicly available in the provided connected documents. The Initial Description notes an information leak when writing the Full Disk Encryption key on Qualcomm Snapdragon devices prior to 2018-04-05, but no deeper specifics are given.

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

CVE-2015-9167

CVE-2015-9167 affects Qualcomm Snapdragon platforms (Automobile and Mobile) across SD 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, and 820A. Description: an integer underflow in an EMM command can occur. The issue is documented in multiple sources (NVD, CVE lists)...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...

CVE-2016-10455

The CVE-2016-10455 issue affects Android devices prior to the 2018-04-05 patch level and some Qualcomm Snapdragon platforms. The root cause is improper initialization of ike_sa_handle_ptr in IPSEC, which can trigger a denial of service. The affected devices include a wide range of Qualcomm-based ...

CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9202

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-9191

In CVE-2015-9191, the flaw is a NULL pointer/untrusted pointer dereference in a QTEE syscall handler affecting Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 617, SD 650/52, SD 808/...

CVE-2016-10454

CVE-2016-10454 affects Android devices with Qualcomm Snapdragon Mobile (SD 425, SD 430, SD 450, SD 625). In a QTEE API function, an array out-of-bounds index can occur, as described in the vulnerability entry with a high impact score (CVSS v3 base 9.8, CRITICAL). The connected documents place thi...

CVE-2014-10063

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device...

CVE-2014-10057

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and SnapdragonHighMed2016, binary Calibration files under data/misc/audio have 777...

CVE-2017-18135

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service WDS module, a buffer overflow can occur...

Buffer overflow

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted namelen and valuelen values ar...