CVE-2015-9171

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A,...

CVE-2016-10434

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function is a buffer from HLOS that needs to be authenticated using HMAC and then processed. However, some of the processing...

CVE-2015-9111

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, in a QTEE syscall handler, an untrusted pointer dereference can occur...

CVE-2016-10459

CVE-2016-10459 describes a memory exhaustion issue in Android devices during calls on Qualcomm Snapdragon platforms (various MDM and SD families). The vulnerability affects Android builds before the 2018-04-05 patch level (and older patch levels). Root cause is memory exhaustion during call handl...

CVE-2015-9140

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD...

CVE-2016-10424

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, SD 820A, SD 835, S...

CVE-2015-9111

CVE-2015-9111 affects Android on Qualcomm Snapdragon devices (SD 425/430/450/625/650/52/820/820A) where a QTEE syscall handler could dereference an untrusted pointer. This could enable remote code execution with network access and no user interaction. The vulnerability is documented as affecting ...

CVE-2016-10416

CVE-2016-10416 affects Android devices prior to the 2018-04-05 security patch level (and earlier patches) on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms. The issue causes a UE crash due to IPCMem exhaustion when UDP data is pumped to the UE’s ULP UDP port 7275. The vulnerability impa...

CVE-2014-10044

CVE-2014-10044 affects Android on Qualcomm Snapdragon devices, where in the time daemon an unauthorized user could modify the system time and cause an array index to go out of bounds. Affected platforms include Snapdragon MDM9615/9625/9635M and SD series 210/212/205, 400, 617, 800, and 820, with ...

CVE-2016-10415

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810...

CVE-2016-10454

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425, SD 430, SD 450, and SD 625, in a QTEE API function, an array out-of-bounds index can occur...

CVE-2015-9114

Summary: CVE-2015-9114 affects Android devices with Qualcomm Snapdragon components, where the qsee_query_counter syscall may dereference an untrusted pointer due to missing address argument validation. This could allow a local/user-privilege attacker to trigger arbitrary behavior in certain Qualc...

CVE-2015-9126

CVE-2015-9126 is a buffer overflow vulnerability affecting Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, 425, 430, 450, 617, 625, 650/52, 808, 810, 820, 835, 845, 850, SDX20). The flaw occurs while processing a 1X...

CVE-2016-10471

CVE-2016-10471 affects Android on Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 425/430/450/625/650/52/820/820A). The issue is an unsigned RTIC health report that can be tampered with by malware executing in the context of the HLOS, potentially enabling unauthorized modificat...

CVE-2016-10414

CVE-2016-10414 affects Android devices using Qualcomm Small Cell SoCs (and related Snapdragon/SD variants) where passing a hash with zero datalength causes the code to return an error, even though zero length is valid. Connected sources confirm the issue and map it to a broad set of Qualcomm/Andr...

CVE-2015-9215

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader findep function...

CVE-2016-10422

CVE-2016-10422 affects Android devices (Qualcomm Small Cell SoC, Snapdragon lines, SDx platforms) with an underlying issue described as improper access control in a system call that leads to unauthorized access. The entry documents this vulnerability across multiple Qualcomm/Android components an...

CVE-2016-10460

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 835, SD 845, and SD 850, vendor specific opcodes may not have any packet length validation leading to buffer over-reads...

CVE-2016-10433

CVE-2016-10433 is an Android/Qualcomm TOCTOU vulnerability during SSD image decryption that can cause memory corruption on affected Snapdragon Mobile/Automotive/Wear platforms (various SDP/SD devices). The issue affects Android images prior to the 2018-04-05 security patch level; Android/patched ...

CVE-2015-9170

CVE-2015-9170: In Android devices with Qualcomm Snapdragon components (Automobile, Mobile, Wear; including MDM9206/9650, MSM8909W, SD 210–212/205, SD 400/410/12, SD 425/430/450, SD 615/16/415, SD 617/625/650/52, SD 800/808/810/820/820A, SD 835/845/850), an incorrect offset check in wv_dash_core_r...