9074 matches found
CVE-2017-18145
CVE-2017-18145 describes a Use-After-Free condition in the DPM native process while handling Android framework events on Qualcomm Snapdragon platforms. The underlying issue is that an iterator pointer is deleted after an event is processed, which can cause a Use After Condition during processing ...
CVE-2017-8275
CVE-2017-8275 describes an integer overflow in a video library affecting Android devices on Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/430/450/617/625/650/52/800/808/820/835). The issue is triggered in the video processing code and is documented as a vulnerability with network attack v...
CVE-2017-18072
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, S...
CVE-2017-18128
CVE-2017-18128 affects Android on Qualcomm Snapdragon Mobile platforms (SD 845/850) prior to the 2018-04-05 security patch level. Root cause: improper access control when configuring the MPU protecting error-correction registers, which may lead to exposure of related secured data. Impact stated i...
CVE-2017-18136
CVE-2017-18136 concerns a Use After Free condition in the Android omx aac component affecting Qualcomm platforms (Snapdragon Automobile, Mobile, Wear; various SD/MDM chips). The issue is triggered in the omx aac component and may potentially allow a remote attacker to exploit it, with the CVSS in...
CVE-2018-3593
CVE-2018-3593 describes a double-free condition in Android prior to the 2018-04-05 security patch level on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) including MDM9206/9607/9650, MSM8909W, SD 210/212/205, SD 400/425/430/450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808/810, S...
CVE-2018-3591
CVE-2018-3591 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to the 2018-04-05 patch level. The root cause is that the default BOOT.BF.3.0 device programmer configuration enables the SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM flag, which exposes peek and pok...
CVE-2017-18146
CVE-2017-18146 affects Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear; various SDM/MDM/SD chips). In vulnerable builds prior to the 2018-04-05 patch level, ECDSA signature verification can fail in corner cases, potentially impacting message authentication. The issue is listed ...
CVE-2017-18139
CVE-2017-18139 describes a buffer overflow vulnerability in Android prior to the 2018-04-05 patch level affecting Qualcomm Snapdragon mobile/wear platforms (e.g., MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD series). The flaw could exist during IMS call setup, potentially enabling an expl...
CVE-2017-18138
CVE-2017-18138 describes a buffer overflow in GERAN within Android prior to the 2018-04-05 patch level on Qualcomm-based devices (various Snapdragon Mobile/Wear platforms listed). The vulnerability is triggered in a Qualcomm GERAN component and may potentially allow memory corruption. The Connect...
CVE-2017-18126
CVE-2017-18126 affects Android on Qualcomm-based devices (e.g., Snapdragon/WLAN stacks) where the original mac spoofing feature in probe requests for cfg80211 scan, vendor scan, and pno scan did not use randomized sequence numbers or randomized source addresses. This privacy-related flaw could af...
CVE-2017-18074
CVE-2017-18074 affects Android on Qualcomm Snapdragon devices (mobile and Wear) before the 2018-04-05 security patch level. When playing a .wma file with a modified media header that has a non-standard bytes-per-second value, a reachable assert may occur in affected media components. According to...
CVE-2017-18072
CVE-2017-18072 affects Android on Qualcomm Snapdragon/mobile platforms (list of affected SoCs) where probe requests from a user’s device reveal information elements that specify supported Wi‑Fi features, creating a potential privacy risk if sniffed. The root cause is the disclosure of Wi‑Fi infor...
CVE-2017-18130
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while...
CVE-2018-3592
CVE-2018-3592 describes a null-pointer dereference in Qualcomm-based Android components prior to the 2018-04-05 security patch level. The issue occurs when a memory pointer is written to after a check to ensure the pointer is not NULL, potentially leading to memory corruption or a crash in affect...
CVE-2017-18128
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers may potentially lead to exposure of related secured data...
CVE-2017-18133
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an out of bound access for ebi channel array can potentially occur...
CVE-2017-18133
CVE-2017-18133 affects Android on Qualcomm-based devices (Snapdragon Mobile/Wear). The issue is an out-of-bounds access in the ebi channel array, reported before the 2018-04-05 patch level. The Android bulletin for 2018-04-01/2018-04-05 indicates patches were released; devices with patch level 20...
CVE-2017-18126
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD...