CVE-2016-10437

CVE-2016-10437 is an information-disclosure vulnerability affecting Android devices with Qualcomm networking components. In affected Android versions prior to 2018-04-05 patch level (and related patches for various Qualcomm SoCs such as Small Cell, Snapdragon Mobile/Wear families and SDR devices ...

CVE-2016-10436

CVE-2016-10436 affects Android on Qualcomm/Qualcomm-based SoCs (e.g., Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055; IPQ4019/IPQ8064/MDM92xx/MSM89xx/SD family and related SDX20 devices). The issue is improper input validation on a read path that leads to memory corruption in the aff...

CVE-2016-10435

CVE-2016-10435 is a TOCTOU vulnerability in some Qualcomm QTEE syscall handlers affecting Android versions prior to the 2018-04-05 security patch level (and prior to patches included in the 2018-04-01/05 Android bulletins). The issue is documented as enabling potential compromises in confidential...

CVE-2015-9198

Summary of CVE-2015-9198 : An integer underflow in the Qualcomm qsee_register_log_buff function allows writing beyond intended bounds, potentially corrupting secure memory. The public records identify affected Android builds on Qualcomm-based devices (e.g., Snapdragon Automobile, Snapdragon Mobil...

CVE-2015-9195

CVE-2015-9195 affects Android (pre-2018-04-05 patch level) on Qualcomm Snapdragon platforms (MDM9625/9635M/9650/9655; SD 400/410–12/615/16/415/617/650/52/808/810; SDX20) where a QTEE syscall handler can trigger a buffer overflow in the High-Level OS (HLOS). The issue is rooted in the QTEE syscall...

CVE-2015-9191

In CVE-2015-9191, the flaw is a NULL pointer/untrusted pointer dereference in a QTEE syscall handler affecting Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 617, SD 650/52, SD 808/...

CVE-2015-9190

CVE-2015-9190 describes an integer overflow in boot_clobber_check_local_address_range() on certain Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/410/12/16, SD 600/615/16/SD 415, SD 808, SD 810, IPQ4019, MDM9xx, MSM89xx, etc.). The overflow can bypass the clobber protection check, leading ...

CVE-2015-9186

CVE-2015-9186 affects Android on Qualcomm Snapdragon family (automobile, mobile, wearables) and several SoCs (e.g., SD 210/212/205, 400/410, 425/430/450, 615/625/650/52, 800/808/810/820/835/845, 850) where a buffer over-read can occur in a PlayReady API function. The issue is documented with a hi...

CVE-2015-9183

CVE-2015-9183 affects Android devices built with Qualcomm Snapdragon chips (SD 410/12, SD 617, SD 650/52, SD 800, SD 808, SD 810). In the TQS QSEE application, parsing the "Set Certificates" command can trigger an integer overflow that may overflow a buffer. This is described as a high-severity, ...

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

CVE-2015-9174

CVE-2015-9174 describes a memory overwrite risk in QSEE due to lack of validation of a return value before buffer allocation. Affected Qualcomm Snapdragon Mobile devices include SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810. CVSS shows 3.0 base score 9.8 (CRITICAL) with network attack ...

CVE-2015-9171

CVE-2015-9171 describes a buffer over-read in OEMCrypto_Dash_InstallEncapKeybox() when keyBoxLength exceeds TZ_WV_MAX_DATA_LEN (20k) on various Qualcomm/Android components. Affected: Android devices with Qualcomm Snapdragon Automotive/Mobile/Wear stack listed in the description (multiple SoCs). R...

CVE-2015-9170

CVE-2015-9170: In Android devices with Qualcomm Snapdragon components (Automobile, Mobile, Wear; including MDM9206/9650, MSM8909W, SD 210–212/205, SD 400/410/12, SD 425/430/450, SD 615/16/415, SD 617/625/650/52, SD 800/808/810/820/820A, SD 835/845/850), an incorrect offset check in wv_dash_core_r...

CVE-2015-9167

CVE-2015-9167 affects Qualcomm Snapdragon platforms (Automobile and Mobile) across SD 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, and 820A. Description: an integer underflow in an EMM command can occur. The issue is documented in multiple sources (NVD, CVE lists)...

CVE-2015-9166

CVE-2015-9166 concerns DRM provisioning in QSEE-based components on Qualcomm Snapdragon platforms. The issue arises because the finalize_prov_flag.data mechanism, intended to prevent further provisioning after initial provisioning, is not sufficiently checked, allowing provisioning to proceed eve...

CVE-2015-9163

Summary (CVE-2015-9163) : In Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear: MDM9206/9650/8909W, SD 210–850 variants) prior to the 2018-04-05 SPL, a vulnerability in a PlayReady function can lead to information exposure (confidentiality impact). The issue is identified in mult...

CVE-2015-9162

CVE-2015-9162 – Mode C summary : The issue affects Android devices with Qualcomm QSEE “Certificate_CreateWithBuffer” handling. When memory allocation fails, the code frees the memory but returns the original pointer without setting it to NULL, creating a potential use-after-free scenario in TQS. ...

CVE-2015-9159

CVE-2015-9159 affects Android devices with Qualcomm Snapdragon/mobile/wear chipsets prior to the 2018-04 patch, where the input validation gap in OEMCrypto_GetRandom can cause a potential buffer overflow. The CVE entry describes the issue as present on a wide range of Snapdragon platforms (Automo...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...