CVE-2015-9108

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation performed on calls to a QSEE syscall may lead to arbitrary read/write or NUL...

CVE-2015-9221

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference...

CVE-2014-10045

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 820, and SDX20, buffer overflow...

CVE-2015-9115

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the...

CVE-2016-10423

Mode C: CVE-2016-10423 describes a vulnerability in Android where, on Qualcomm Snapdragon Automotive and Mobile platforms (SD 425/430/450/625/650/52/820/820A), a Trusted Application that has opened the SPI bus to a device can be read by another Trusted Application due to non-exclusive access. The...

CVE-2016-10418

The CVE-2016-10418 entry describes an Android-related flaw where HLOS could enable PMIC debugging through TCSR_QPDI_DISABLE_CFG due to improper access control, affecting Qualcomm Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear devices (covering MDM9206/9650, various SD chips). The r...

CVE-2014-10050

The CVE-2014-10050 entry concerns an access-control collision vulnerability in the replay protected memory block on Qualcomm Snapdragon Mobile platforms (MSM8996, MSM8939, MSM8976, MSM8917, SDM845, SDM660) running Android with patch levels prior to 2018-04-05. The issue is described as an access ...

CVE-2014-10056

Concrete technical details found: CVE-2014-10056 is an Android/OpenCL-related buffer overflow affecting OpenCL applications that call clBuildProgram() with a CL_DEVICE_TYPE_CPU in the device_list, on Qualcomm CPUs SD 210/212/205 (Android prior to 2018-04-05 SPL). The CNVD-2018-08830 entry confirm...

CVE-2014-10045

Technical details about CVE-2014-10045 are not publicly provided in the supplied documents. Monitor for updates and additional disclosures in connected sources as they become available.

CVE-2015-9194

CVE-2015-9194 affects Android on Qualcomm Snapdragon mobile platforms (SD 210/212/205, 400, 425, 427, 430, 435, 450, 617, 625, 650/652, 800, 845, Snapdragon_High_Med_2016). During TZ Startup module load, memory statically allocated by modules was not set to zero, allowing a module to run without ...

CVE-2015-9192

CVE-2015-9192 affects Android devices with Qualcomm Snapdragon components (Automobile, Mobile, Wear; various SD/MDM variants). The issue is an out-of-bounds memory access in the content protection manager caused by improper validation of incoming messages. This is described in the Android 2018-04...

CVE-2015-9193

CVE-2015-9193 affects Android devices with Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) across multiple SDM/SDC/SDM series. The issue is improper input validation that can cause memory overread, leading to application crashes. Public details indicate impact up to Android patch level 2...

CVE-2015-9217

CVE-2015-9217 involves malformed HVEC clips that can trigger an assertion failure in Android devices on Qualcomm Snapdragon platforms (numerous models) prior to the 2018-04-05 security patch level. The issue is described in the CVE entry with a Local attack vector and impacts to confidentiality, ...

CVE-2015-9216

CVE-2015-9216 concerns Android devices using Qualcomm Snapdragon and related chipsets where the USB subsystem mishandles simultaneous interrupts during USB RESET and EP COMPLETE. Affected products span Snapdragon Mobile/Wear platforms (MDM9206/9607/9625/9635M/ MSM8909W) and various Snapdragon SD ...

CVE-2016-10439

The CVE-2016-10439 issue is a TOCTOU vulnerability in the bulletin_board_read input validation on Qualcomm Snapdragon Automotive and Mobile platforms (SD 425, 430, 450, 625, 650/52, 820, 820A) where a pointer dereference may be validated after the HLOS could modify the pointer. Affected Android r...

CVE-2016-10443

CVE-2016-10443 affects Android devices with Qualcomm Snapdragon Automotive, Mobile, and Wear platforms (e.g., MDM9xxx, SD 210/212/205 to SD 850 families). The issue, described as possible packet replay, is tied to affected Qualcomm/Snapdragon components and is fixed by Android patch levels of 201...

CVE-2016-10445

CVE-2016-10445 describes improper input validation in a Qualcomm QTEE API function affecting Android devices with Snapdragon Automotive and Snapdragon Mobile platforms (SD 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 820, 820A, 835, 845, 850, SDM630/636/660, Snapdragon_High_Med_2016). The...

CVE-2016-10425

CVE-2016-10425 concerns a buffer overflow in the GPT listener on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) when a large buffer offset is passed. Affected Android releases include Android builds up to the 2018-04-05 security patch level across Snapdragon 210/212/205, 400, 410/12, 42...

CVE-2016-10460

Technical details for CVE-2016-10460 are not publicly provided in the connected documents. The available description notes a buffer over-read due to missing packet-length validation in Qualcomm vendor opcodes on affected Android devices. Monitor for updates and official patches.

CVE-2016-10461

The CVE-2016-10461 issue affects Android devices with Qualcomm chipsets (MDM9650, SD 650/52, SD 808, SD 810, SD 820, SDX20) where a lack of proper bounds checking can lead to a buffer overread. Reported risk indicates a high/critical impact across confidentiality, integrity, and availability, wit...