CVE-2015-9212

The CVE-2015-9212 issue affects Qualcomm Snapdragon platforms (Mobile and Wear MSM8909W; SD 210/212/205; SD 400; SD 410/12; SD 800). Root cause: lack of input validation while processing TZ_PR_CMD_SAVE_KEY leads to a buffer overread. Impact is described as high across confidentiality, integrity, ...

CVE-2015-9223

CVE-2015-9223 describes a buffer overflow in Android prior to the 2018-04-05 security patch level when processing an audio buffer on Qualcomm Snapdragon mobile platforms (MDM9615, MDM9625, MDM9635M, SD 400/600/800). The issue affects Android devices using these Qualcomm components and could enabl...

CVE-2014-9985

CVE-2014-9985 affects Android on Qualcomm Snapdragon platforms (MDM9635M, SD 400, SD 800). The vulnerability arises from a TOCTOU race condition that can bypass error-condition checks, causing undefined behavior in the affected components. Based on the initial and linked references, the issue is ...

CVE-2016-10483

CVE-2016-10483 affects Android devices with Qualcomm Snapdragon Mobile SoCs (SD 410/12, SD 615/16, SD 415, SD 808, SD 810). Root cause is improper input validation while processing SCM Command, leading to unauthorized memory access. According to the Android bulletin, these issues were addressed w...

CVE-2016-10430

CVE-2016-10430 affects Android on certain Qualcomm platforms (Snapdragon Automobile and Snapdragon Mobile) prior to the 2018-04-05 patch level. The issue arises when a TA (trusted application) that has privileges to the CPVC MINK class executes and is able to access methods exposed by the CPVC in...

CVE-2016-10437

CVE-2016-10437 is an information-disclosure vulnerability affecting Android devices with Qualcomm networking components. In affected Android versions prior to 2018-04-05 patch level (and related patches for various Qualcomm SoCs such as Small Cell, Snapdragon Mobile/Wear families and SDR devices ...

CVE-2016-10438

CVE-2016-10438 is an information exposure issue in Android devices affected by Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055, IPQ4019/IPQ8064, and various SD/SoC families. The root cause is logging of debug statements using %p, which could expose kernel or driver pointers. The repor...

CVE-2016-10426

CVE-2016-10426 documents a buffer overflow in SafeSwitch affecting Android devices powered by Qualcomm Snapdragon (Automobile and Mobile) across multiple SD cores (410/12, 425, 430, 450, 617, 625, 650/52, 810, 820, 820A). Root cause is a buffer overflow in SafeSwitch; exploitation details are not...

CVE-2015-9183

CVE-2015-9183 affects Android devices built with Qualcomm Snapdragon chips (SD 410/12, SD 617, SD 650/52, SD 800, SD 808, SD 810). In the TQS QSEE application, parsing the "Set Certificates" command can trigger an integer overflow that may overflow a buffer. This is described as a high-severity, ...

CVE-2015-9178

CVE-2015-9178 is a memory-corruption issue affecting Android devices with Qualcomm Snapdragon SoCs (incl. Snapdragon Automobile, Mobile, Wear families and related SD ranges up to SD 850) when processing the rmp secure command. The vulnerability allows memory corruption if the response buffer is s...

CVE-2015-9166

CVE-2015-9166 concerns DRM provisioning in QSEE-based components on Qualcomm Snapdragon platforms. The issue arises because the finalize_prov_flag.data mechanism, intended to prevent further provisioning after initial provisioning, is not sufficiently checked, allowing provisioning to proceed eve...

CVE-2015-9134

CVE-2015-9134 affects Android devices with Qualcomm Snapdragon Mobile (SD 410/12, SD 615/16/SD 415, SD 810). The issue arises while processing QSEE Syscall qsee_macc_gen_ecc_privkey, where an untrusted pointer dereference can lead to arbitrary writes. Publicly available Android bulletin entries p...

CVE-2015-9136

CVE-2015-9136 describes a buffer overflow in the Android/Qualcomm host driver during pre-auth requests, caused when FT IEs from the supplicant exceed the expected size. The vulnerability affects a wide range of Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206, MDM9607, MDM9...

CVE-2015-9174

CVE-2015-9174 describes a memory overwrite risk in QSEE due to lack of validation of a return value before buffer allocation. Affected Qualcomm Snapdragon Mobile devices include SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810. CVSS shows 3.0 base score 9.8 (CRITICAL) with network attack ...

CVE-2015-9161

CVE-2015-9161 describes a TOCTOU-induced buffer overflow in playready_reader_bind() affecting Android on Qualcomm Snapdragon platforms (MSM8909W; SD 210/212/205; SD 400; SD 410/12; SD 615/16/SD 415; SD 617; SD 650/52; SD 800; SD 808; SD 810). Affected Android versions are before the 2018-04-05 se...

CVE-2015-9152

The CVE-2015-9152 issue affects Android devices using certain Qualcomm Snapdragon modem/SoC families (e.g., IPQ4019, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 615/16/415, 625, 800, 810, 820/820A, 835, Snapdragon_High_Med_2016) where modem-owned regions can be reached from the secure s...

CVE-2016-10471

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, an unsigned RTIC health report susceptible to tampering by malware executing in the context of the HLOS may be...

CVE-2015-9115

CVE-2015-9115 affects Android on Qualcomm Snapdragon platforms (Automotive and Mobile MDM9625 and several Snapdragon 410/12/425/430/450/615/16/415/617/625/650/52/820/820A). The root cause is missing validation of the address argument in the qsee_prng_getdata syscall, enabling potential misuse. Re...

CVE-2016-10422

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 617, ...

CVE-2016-10487

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810,...