CVE-2016-10417

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2016-10432

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, TOCTOU vulnerabilities may occur while sanitizing userspace values passed to tQSEE system call...

CVE-2016-10433

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808...

CVE-2016-10439

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU vulnerability in the input validation for bulletinboardread syscall. A pointer dereference is bein...

CVE-2015-9161

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, TOCTOU condition could lead to a buffer overflow in function...

CVE-2014-9985

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior...

CVE-2014-9985

CVE-2014-9985 affects Android on Qualcomm Snapdragon platforms (MDM9635M, SD 400, SD 800). The vulnerability arises from a TOCTOU race condition that can bypass error-condition checks, causing undefined behavior in the affected components. Based on the initial and linked references, the issue is ...

CVE-2016-10409

CVE-2016-10409 describes a TOCTOU vulnerability in RPMB request construction on Android devices using Qualcomm platforms (Snapdragon Automotive and Snapdragon Mobile) prior to the 2018-04-05 security patch level. The issue arises when RPMB requests are composed using buffers controlled by the hig...

CVE-2016-10417

The CVE-2016-10417 entry describes a TOCTOU vulnerability in QTEE across numerous Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) including IPQ4019, MDM9xxx, SD-series chips. The issue arises from improper access control, enabling timing-based races that could compromise confidentiality,...

CVE-2016-10433

CVE-2016-10433 is an Android/Qualcomm TOCTOU vulnerability during SSD image decryption that can cause memory corruption on affected Snapdragon Mobile/Automotive/Wear platforms (various SDP/SD devices). The issue affects Android images prior to the 2018-04-05 security patch level; Android/patched ...

CVE-2016-10435

CVE-2016-10435 is a TOCTOU vulnerability in some Qualcomm QTEE syscall handlers affecting Android versions prior to the 2018-04-05 security patch level (and prior to patches included in the 2018-04-01/05 Android bulletins). The issue is documented as enabling potential compromises in confidential...

CVE-2016-10439

The CVE-2016-10439 issue is a TOCTOU vulnerability in the bulletin_board_read input validation on Qualcomm Snapdragon Automotive and Mobile platforms (SD 425, 430, 450, 625, 650/52, 820, 820A) where a pointer dereference may be validated after the HLOS could modify the pointer. Affected Android r...

CVE-2016-10432

CVE-2016-10432 affects Android devices with Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 410/12, 425, 430, 450, 617, 625, 650/52, 820, 820A). The issue is a TOCTOU vulnerability during sanitization of userspace values passed to the tQSEE system call, potentially enabling pos...

PT-2018-4658

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A TOCTOU vulnerability exists in QTEE due to improper access control, affecting Android on various Qualcomm Snapdragon platforms. Recommendations For Android versions prior ...

PT-2018-4672

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue exists in some QTEE syscall handlers on certain Qualcomm Snapdragon processors. This issue affects Android devices with these...

CVE-2014-9985: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior...

CVE-2016-10439: Concurrent Execution using Shared Resource with Improper Synchronization

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU vulnerability in the input validation for bulletinboardread syscall. A pointer dereference is bein...

CVE-2016-10432: Concurrent Execution using Shared Resource with Improper Synchronization

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, TOCTOU vulnerabilities may occur while sanitizing userspace values passed to tQSEE system call...

CVE-2016-10409: Concurrent Execution using Shared Resource with Improper Synchronization

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU vulnerability may occur while composing the RPMB request using HLOS controlled buffers...

CVE-2016-10417: Improper Access Control

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...