CVE-2016-10425

CVE-2016-10425 concerns a buffer overflow in the GPT listener on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) when a large buffer offset is passed. Affected Android releases include Android builds up to the 2018-04-05 security patch level across Snapdragon 210/212/205, 400, 410/12, 42...

CVE-2016-10424

CVE-2016-10424 concerns an issue in the LibPNG library used on Android devices. The provided records show that, for affected Android builds, upgrading LibPNG from 1.6.12 to 1.6.21 fixes multiple issues described by different CWEs. The Android CVE entry ties the vulnerability to the need for a pat...

CVE-2016-10422

CVE-2016-10422 affects Android devices (Qualcomm Small Cell SoC, Snapdragon lines, SDx platforms) with an underlying issue described as improper access control in a system call that leads to unauthorized access. The entry documents this vulnerability across multiple Qualcomm/Android components an...

CVE-2016-10421

CVE-2016-10421 is tied to Android devices using Qualcomm AMSS/closed‑source components. The root cause is improper clearing of key material. The CVE is listed in the 2014–2016 Qualcomm cumulative update, with a High severity rating in that context. Public Android bulletin coverage for this issue ...

CVE-2016-10420

CVE-2016-10420 affects Android devices with Qualcomm Snapdragon/mobile platforms listed (e.g., MDM9206/9607/9650 and SD family up to SDX20). The issue arises while playing a .flv clip that lacks an inbuilt seek table, where a dynamic index table access goes out of bounds, causing a crash (availab...

CVE-2016-10417

The CVE-2016-10417 entry describes a TOCTOU vulnerability in QTEE across numerous Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) including IPQ4019, MDM9xxx, SD-series chips. The issue arises from improper access control, enabling timing-based races that could compromise confidentiality,...

CVE-2016-10416

CVE-2016-10416 affects Android devices prior to the 2018-04-05 security patch level (and earlier patches) on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms. The issue causes a UE crash due to IPCMem exhaustion when UDP data is pumped to the UE’s ULP UDP port 7275. The vulnerability impa...

CVE-2016-10415

CVE-2016-10415 is a DoS vulnerability described as: in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear devices (list includes MDM9206/9607/9640/9650, MSM8909W, SD 210–212/205, 400/410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835, SDX20) a dereference of ...

CVE-2016-10414

CVE-2016-10414 affects Android devices using Qualcomm Small Cell SoCs (and related Snapdragon/SD variants) where passing a hash with zero datalength causes the code to return an error, even though zero length is valid. Connected sources confirm the issue and map it to a broad set of Qualcomm/Andr...

CVE-2016-10412

CVE-2016-10412 describes an integer overflow that could lead to a buffer overflow in a memory API function on Android devices with Qualcomm Small Cell SoCs, Snapdragon Mobile, and Snapdragon Wear families. The affected range includes numerous Snapdragon/SD and related components, with the issue a...

CVE-2016-10411

CVE-2016-10411 affects Android devices with Qualcomm Snapdragon SoCs (SD 210/212/205, 400, 410/12, 430, 450, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835). The vulnerability lies in the RTP daemon’s RTCP packet handling; a parser misinterprets an unknown RTCP APP packet, causing the pack...

CVE-2016-10410

CVE-2016-10410 is a buffer overflow in RTP processing during VoLTE calls affecting Android devices with Qualcomm Snapdragon Mobile/Wear platforms (wide list of affected Snapdragon SoCs). The issue is documented as exploitable via network conditions and could impact confidentiality, integrity, and...

CVE-2016-10407

CVE-2016-10407 affects Android platforms prior to the 2018-04-05 patch level, involving an integer overflow that can trigger a buffer overflow during a VT call on Qualcomm Snapdragon Mobile SoCs (SD 210/212/205, 400, 410/12, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820, 835). Af...

CVE-2016-10406

CVE-2016-10406 affects Qualcomm-based Android devices (notably Snapdragon SoCs including MDM9650 and a wide range of SD 210/212/205, 410/12, 430, 450, 615/16/415, 617, 625, 650/52, 808, 810, 820, 835) where printing a pointer in wlan_qmi_err_cb prints the real kernel address regardless of kptr_re...

CVE-2015-9224

The CVE-2015-9224 issue stems from a lack of input validation in QURTK_write() on Qualcomm Snapdragon platforms (listed: Snapdragon Automobile, Mobile, Wear, Small Cell SoCs and various SD/SM/DMM variants) running Android with patch levels older than 2018-04-05. Root cause: insufficient input val...

CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9218

CVE-2015-9218 describes a hang in Android devices when processing certain HEVC clips, occurring on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 625, 650/52, 800, 808, 810, 820, 835, 845, SDM630/636/660, Snapdragon_High_Med_2016) ...

CVE-2015-9217

CVE-2015-9217 involves malformed HVEC clips that can trigger an assertion failure in Android devices on Qualcomm Snapdragon platforms (numerous models) prior to the 2018-04-05 security patch level. The issue is described in the CVE entry with a Local attack vector and impacts to confidentiality, ...

CVE-2015-9216

CVE-2015-9216 concerns Android devices using Qualcomm Snapdragon and related chipsets where the USB subsystem mishandles simultaneous interrupts during USB RESET and EP COMPLETE. Affected products span Snapdragon Mobile/Wear platforms (MDM9206/9607/9625/9635M/ MSM8909W) and various Snapdragon SD ...

CVE-2015-9213

CVE-2015-9213 affects Android devices with Qualcomm Snapdragon/mobile platforms. The issue arises from the DIAG-EFS EFS2_DIAG_DELTREE command, handled by fs_diag_deltree_handler(), which is documented to delete files and directories only inside the /public folder. According to NVD, the vulnerabil...