CVE-2014-9995

CVE-2014-9995 (Android/Qualcomm) has concrete details in CNVD-2018-08827: A buffer overflow in drmprov_cmd_verify_key() on Qualcomm SD 400/800 affects Android versions before the 2018-04-05 patch level. The issue stems from not validating feature_name_length, with a potential integer wrap in the ...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2015-9147

CVE-2015-9147 affects Android devices on Qualcomm Snapdragon platforms (MDM9625, MDM9635M, SD 400, SD 800) with patch levels before 2018-04-05. The flaw enables exploitation via userspace-provided pointer arguments that are not validated, as documented in the CVE description and corroborated by t...

CVE-2016-10454

CVE-2016-10454 affects Android devices with Qualcomm Snapdragon Mobile (SD 425, SD 430, SD 450, SD 625). In a QTEE API function, an array out-of-bounds index can occur, as described in the vulnerability entry with a high impact score (CVSS v3 base 9.8, CRITICAL). The connected documents place thi...

CVE-2016-10455

The CVE-2016-10455 issue affects Android devices prior to the 2018-04-05 patch level and some Qualcomm Snapdragon platforms. The root cause is improper initialization of ike_sa_handle_ptr in IPSEC, which can trigger a denial of service. The affected devices include a wide range of Qualcomm-based ...

CVE-2016-10489

CVE-2016-10489 affects Android devices with Qualcomm Snapdragon Mobile (SD 400) on affected patch levels prior to 2018-04-05. The vulnerability arises from lack of address argument validation in qsee_get_tz_app_name(), which can lead to an untrusted pointer dereference. The Android Bulletin for 2...

CVE-2014-10063

CVE-2014-10063 affects Qualcomm-based Android devices (Qualcomm Snapdragon Mobile MDM9625 and SD 800). The fuse at secure boot was not blown correctly, per Android bulletin context. Impact is defined as a fault in the secure-fuse state; the issue is mitigated by the 2018-04-05 security patch leve...

CVE-2014-10063

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device...

CVE-2014-10057

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and SnapdragonHighMed2016, binary Calibration files under data/misc/audio have 777...

CVE-2014-10055

CVE-2014-10055 affects Android on Qualcomm Snapdragon Mobile SD 400/800 prior to 2018-04-05 patch level, describing potential leakage of protected contents if HLOS does not request security restoration for OCMEM xPU. The CVE entry provides CVSS metrics (2.0/5.0 and 3.0/7.5), indicating network/ve...

CVE-2014-10046

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the...

CVE-2014-10047

Technical details about CVE-2014-10047 are not publicly available in the provided connected documents. The Initial Description notes an information leak when writing the Full Disk Encryption key on Qualcomm Snapdragon devices prior to 2018-04-05, but no deeper specifics are given.

CVE-2017-18135

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service WDS module, a buffer overflow can occur...

Buffer overflow

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted namelen and valuelen values ar...

Buffer overflow

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr capture size is larger than the maximum size of a diag logPacket, which can lead to a buffer overflow when the sample buffer is copied to the logPacket buffer...

CVE-2017-18072

CVE-2017-18072 affects Android on Qualcomm Snapdragon/mobile platforms (list of affected SoCs) where probe requests from a user’s device reveal information elements that specify supported Wi‑Fi features, creating a potential privacy risk if sniffed. The root cause is the disclosure of Wi‑Fi infor...

CVE-2017-18143

CVE-2017-18143 affects Android on Qualcomm Snapdragon Mobile (SD 845/SD 850) prior to the 2018-04-05 security patch level. The issue reports that PD dumps were collected on a secure device even when debugging was not enabled, indicating a data leakage risk from the Qualcomm closed-source componen...

CVE-2018-3591

CVE-2018-3591 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to the 2018-04-05 patch level. The root cause is that the default BOOT.BF.3.0 device programmer configuration enables the SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM flag, which exposes peek and pok...

NetScaler SD-WAN Best Practices

Purpose and Scope The intention of this article is to provide the best practices when NetScaler SD-WAN solution is designed, planned, and executed in the your network. Network Infrastructure Design and Configuration Verifying ISP Link Health For new deployments, prior to SD-WAN deployment and/or...

Samsung Mobile Device Design Vulnerabilities

Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android N is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in Samsung mobile devices using the Android N 7.x version, whi...