CVE-2015-9143

CVE-2015-9143 affects Android devices with Qualcomm Snapdragon platforms (including IPQ4019, MDM9xxx, MSM89x, SD family) prior to the 2018-04-05 security patch level. The issue is a buffer overflow that occurs when reading CDT from eMMC with a very large meta offset exceeding the default CDT-arra...

CVE-2015-9141

CVE-2015-9141 impacts Android on Qualcomm Snapdragon platforms (e.g., MDM9206/9607/9635M, MSM8909W, SD 210–SD 810) in HHO scenarios. During the ACQ procedure, the search database can be incorrectly updated, causing memory corruption due to a buffer overflow. NVD references list a high/critical ri...

CVE-2015-9137

CVE-2015-9137 describes a vulnerability in Android where, on Qualcomm Snapdragon platforms (various models listed), several EFS2 DIAG command handlers fail to call fs_diag_access_check(), due to an insufficient access-control check in the DIAG path. The issue is triggered on Android devices using...

CVE-2015-9134

CVE-2015-9134 affects Android devices with Qualcomm Snapdragon Mobile (SD 410/12, SD 615/16/SD 415, SD 810). The issue arises while processing QSEE Syscall qsee_macc_gen_ecc_privkey, where an untrusted pointer dereference can lead to arbitrary writes. Publicly available Android bulletin entries p...

CVE-2015-9130

CVE-2015-9130 describes a NULL pointer dereference in a PlayReady function on Android running on Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MSM8909W; SD 210/212/205; 400; 410/12; 615/16/SD 415; 617; 650/52; 808; 810) prior to the 2018-04-05 security patch level. The issue is exploitabl...

CVE-2015-9127

CVE-2015-9127 affects Android devices with Qualcomm Snapdragon platforms (e.g., MSM8909W, SD 210/212/205, 400/410/12/16, 415, 810) where a large buffer allocation in the Playready App can trigger a null pointer dereference due to memory allocation failure. This is described as a vulnerability in ...

CVE-2015-9124

CVE-2015-9124 affects Android devices with Qualcomm Snapdragon SoCs (MDM9625/9635M/9640/9645 and SD families 210/212/205, 400, 410/12, 615/16/415, 800, 808, 810). The issue can cause a crash or expose otherwise inaccessible memory contents when accessing an invalid pointer. The Android bulletin c...

CVE-2015-9120

CVE-2015-9120 affects Android devices on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) prior to the 2018-04-05 patch level, where the Core detects an Error Condition Without Action. The issue is tied to multiple Snapdragon SoCs (e.g., IPQ4019, SD 210/212/205, 400/410/12, 425, 430, 450,...

CVE-2014-9997

CVE-2014-9997 affects Android on Qualcomm Snapdragon platforms (various SoCs) where PRDiagMaintenanceHandler lacks input validation, causing a buffer over-read. The issue spans multiple Snapdragon products listed in the initial description; CVSS scores indicate Critical impact (C/H, I/H, A/H) wit...

CVE-2014-9991

CVE-2014-9991 describes a buffer overflow in Qualcomm closed-source Android components when USB mass storage transfers exceed 16kB. Public sources (CNVD-2018-08826, NVD entry) tie this issue to Android devices using Qualcomm Snapdragon/mobile platforms (e.g., MDM9206/9625/9635M/etc., SD series) a...

CVE-2014-9990

CVE-2014-9990 pertains to Android devices using Qualcomm Snapdragon platforms (e.g., MDM92xx, MSM89xx, SD 210/212/205, 410/12, 425, 430, 600, 615/16/415, 625, 650/52, 808, 810, 450, etc.). Description: lack of input validation could cause an out-of-bounds array access. The involved advisories ind...

CVE-2014-9989

CVE-2014-9989 affects Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MDM9206/9607/9615/9625/9635M, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/600/615/16/SD 415/625/650/52/808/810/450, etc.). The vulnerability is in the USB management module and is triggered by...

CVE-2014-9987

The CVE-2014-9987 issue is an Android DRM API buffer over-read affecting Qualcomm Snapdragon platforms (MDM9206/9650 and various SD chips). Root cause is a DRM API buffer over-read in affected builds. Impact is high (CVE is listed as CRITICAL/HIGH in CVE notes) with potential confidentiality, int...

CVE-2014-9986

CVE-2014-9986 concerns Android devices with Qualcomm components (e.g., Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear MSM8909W, SD系列) where in playready_licacq_process_response(), the length of the cbResponse is not validated and is controlled by the HLOS. If cbResponse is too large, a...

CVE-2014-10053

CVE-2014-10053 relates to a Widevine-related data access validation issue in Android on Qualcomm Snapdragon platforms (automotive, mobile, wearables) prior to the 2018-04-05 security patch level. The description specifies that data access was not properly validated within the Widevine secure appl...

CVE-2016-10432

CVE-2016-10432 affects Android devices with Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 410/12, 425, 430, 450, 617, 625, 650/52, 820, 820A). The issue is a TOCTOU vulnerability during sanitization of userspace values passed to the tQSEE system call, potentially enabling pos...

CVE-2016-10429

CVE-2016-10429 concerns Android devices (Qualcomm Small Cell SoC, Snapdragon variants, and listed SD/X platforms) where, prior to the 2018-04-05 security patch level, three image types are loaded in the same manner without distinguishing them. The connected documents confirm the vulnerability des...

CVE-2016-10426

CVE-2016-10426 documents a buffer overflow in SafeSwitch affecting Android devices powered by Qualcomm Snapdragon (Automobile and Mobile) across multiple SD cores (410/12, 425, 430, 450, 617, 625, 650/52, 810, 820, 820A). Root cause is a buffer overflow in SafeSwitch; exploitation details are not...

CVE-2016-10425

CVE-2016-10425 concerns a buffer overflow in the GPT listener on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) when a large buffer offset is passed. Affected Android releases include Android builds up to the 2018-04-05 security patch level across Snapdragon 210/212/205, 400, 410/12, 42...

CVE-2016-10424

CVE-2016-10424 concerns an issue in the LibPNG library used on Android devices. The provided records show that, for affected Android builds, upgrading LibPNG from 1.6.12 to 1.6.21 fixes multiple issues described by different CWEs. The Android CVE entry ties the vulnerability to the need for a pat...