CVE-2014-10057

CVE-2014-10057 affects Android on Qualcomm Snapdragon platforms (various MDM and SD系列) where calibration files under data/misc/audio were stored with permissions 777 prior to the 2018-04-05 patch level. The root cause is overly broad file permissions (world-writable) on calibration data, which co...

CVE-2016-10412

CVE-2016-10412 describes an integer overflow that could lead to a buffer overflow in a memory API function on Android devices with Qualcomm Small Cell SoCs, Snapdragon Mobile, and Snapdragon Wear families. The affected range includes numerous Snapdragon/SD and related components, with the issue a...

CVE-2014-10046

CVE-2014-10046 is an Android/Qualcomm PDN throttle use-after-free issue in which the PDN throttle info block is freed without clearing the active timer on affected Qualcomm Snapdragon platforms (MDM9615/9625/9635M and SD 210/212/205, 400, 410/12, 615/16/ SD 415, 800, 808, 810). The vulnerability ...

CVE-2014-9990

CVE-2014-9990 pertains to Android devices using Qualcomm Snapdragon platforms (e.g., MDM92xx, MSM89xx, SD 210/212/205, 410/12, 425, 430, 600, 615/16/415, 625, 650/52, 808, 810, 450, etc.). Description: lack of input validation could cause an out-of-bounds array access. The involved advisories ind...

CVE-2015-9199

CVE-2015-9199 describes a vulnerability in Android on Qualcomm Snapdragon platforms (Automobile and Mobile) affecting multiple SoCs including IPQ4019 and various SDx devices. The root cause is a non-secure region check performed during QSEE buffer address registration (passed by the HLOS) but not...

CVE-2015-9122

CVE-2015-9122 describes a possible buffer overflow in Android on Qualcomm Snapdragon/mobile SoCs when a SIM response exceeds 64 KB for a stream APDU command. Affected products include a wide range of Qualcomm/Snapdragon modems and Android devices, with the issue stemming from handling large APDU ...

CVE-2015-9191

In CVE-2015-9191, the flaw is a NULL pointer/untrusted pointer dereference in a QTEE syscall handler affecting Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 617, SD 650/52, SD 808/...

CVE-2014-10052

The CVE-2014-10052 issue affects Android on Qualcomm TZ subsystem usage (TZ apps and PIL image subsystem) where reserved memory is not cleared after use. Affected platforms include Android builds before 2018-04-05 patch level across numerous Snapdragon Mobile, Wear, and related SoCs (e.g., FSM905...

CVE-2016-10493

Technical details about CVE-2016-10493 are not publicly provided in the supplied documents. The materials summarize affected Android/Qualcomm components and patch timelines but do not disclose root cause specifics, exact affected versions beyond general ranges, exploit status, or fixes.

CVE-2016-10492

CVE-2016-10492 affects Android devices running on Qualcomm Snapdragon/mobile platforms. The issue arises from improper ciphersuite validation, allowing SecSSL to accept an unadvertised ciphersuite. Reported impact includes high confidentiality and integrity concerns (per CVSSv3: Critical, 9.1; CV...

CVE-2016-10494

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 800, ...

CVE-2014-9996

CVE-2014-9996 affects Android devices with Qualcomm Snapdragon Mobile SD 400 and SD 800 preceding the 2018-04-05 patch level. The issue is a buffer overflow during provisioning verification, described across sources (including CNVD-2018-08828) as potentially enabling arbitrary code execution or D...

CVE-2016-10456

CVE-2016-10456 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (numerous SoCs listed in the description). The issue arises when the radish component is run with an invalid network interface name, allowing an arbitrary command of up to 15 characters to be executed as a ...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

CVE-2014-10062

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2016-10484

CVE-2016-10484 describes a buffer underflow in RPMB transfer size calculation when a RPMB listener uses a very small buffer, leading to buffer overflow on affected Qualcomm Snapdragon platforms (Android devices with RPMB support). The issue is triggered during read/write operations and is tied to...

CVE-2016-10490

CVE-2016-10490 is a buffer overflow vulnerability in Android devices with Qualcomm Snapdragon SoCs (including Snapdragon Automobile, Mobile, Wear, and various SD/MDM models) triggered when a negative value is passed as the argument max to qurt_qdi_state_local_new_handle_from_obj. The root cause i...

CVE-2015-9219

CVE-2015-9219 affects Android on Qualcomm Snapdragon devices (SD 400/800) where a DRM API can overflow the buffer due to an integer overflow. The issue is described as enabling high-impact outcomes (C/H/I/A) per CVSS, with network attack vector and no user interaction required. The Android securi...

CVE-2018-3594

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing ...