CVE-2015-9206

Technical details about CVE-2015-9206 are not publicly provided in the connected documents. The materials available here reiterate the issue description but do not specify affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2016-10436

CVE-2016-10436 affects Android on Qualcomm/Qualcomm-based SoCs (e.g., Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055; IPQ4019/IPQ8064/MDM92xx/MSM89xx/SD family and related SDX20 devices). The issue is improper input validation on a read path that leads to memory corruption in the aff...

CVE-2016-10476

CVE-2016-10476 affects Android on Qualcomm Snapdragon/mobile platforms (e.g., MSM/SD family). The issue is missing array index checks on the app index in function qcril_uim_clear_encrypted_pin, causing out-of-bounds reads when the app index is too large. Documented in multiple sources as a vulner...

CVE-2014-9990

CVE-2014-9990 pertains to Android devices using Qualcomm Snapdragon platforms (e.g., MDM92xx, MSM89xx, SD 210/212/205, 410/12, 425, 430, 600, 615/16/415, 625, 650/52, 808, 810, 450, etc.). Description: lack of input validation could cause an out-of-bounds array access. The involved advisories ind...

CVE-2015-9190

CVE-2015-9190 describes an integer overflow in boot_clobber_check_local_address_range() on certain Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/410/12/16, SD 600/615/16/SD 415, SD 808, SD 810, IPQ4019, MDM9xx, MSM89xx, etc.). The overflow can bypass the clobber protection check, leading ...

CVE-2014-10051

CVE-2014-10051 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 400, SD 410/12, SDX20). After loading a dynamically loaded code section, the I-Cache is not invalidated, allowi...

CVE-2015-9205

In CVE-2015-9205, a buffer over-read can occur in a PlayReady API function on Android devices with Qualcomm SD series (MSM8909W, SD210/SD212/SD205, SD410/12, SD615/16/SD415, SD808, SD810). The issue affects Android before 2018-04-05 or earlier patch levels; CVSS indicates a critical impact (high ...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

PT-2018-4493

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by a lack of input validation in the OEMCrypto GetRandom function, which can lead to a potential buffer overflow. This affects Qualcomm Snapdragon...

CVE-2015-9218: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

PT-2018-4678

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to an uninitialized link list entry in the dynamic font module, which can cause a secure UI crash. This problem affects various Qualcomm Snapdragon Mobi...

PT-2018-4479

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A buffer overflow issue occurs when reading CDT from eMMC with a very large meta offset for one of the CDBs on specific Qualcomm Snapdragon Mobile and Snapdragon Wear...

PT-2018-4140

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue allows users to set bases greater than the valid base value while setting offsets, which can lead to an array index out-of-bound condition. This is due to a flaw in time-services on...

PT-2018-4320

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises when an incorrect endpoint number or direction is passed, potentially leading to an out of bounds array access in the USB management module of affected...

PT-2018-4321

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation, which could lead to an out of bound array access. This affects Android on various Qualcomm Snapdragon Mobile and Snapdrag...

PT-2018-4462

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a possible buffer overflow when processing 1X circuit service messages in Android on specific Qualcomm Snapdragon Mobile and Snapdragon Wear devices,...

PT-2018-4471

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to an untrusted pointer dereference in a QTEE syscall handler on specific Qualcomm Snapdragon Mobile and Snapdragon Wear chipsets, including MDM9625,...

PT-2018-4477

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to memory corruption due to buffer overflow in certain Qualcomm Snapdragon Mobile and Snapdragon Wear chipsets, specifically in HHO scenarios during the...

PT-2018-4480

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A buffer overflow issue occurs while processing scheduling message information in Android on specific Qualcomm Snapdragon Mobile and Snapdragon Wear devices, including...

PT-2018-4508

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation that could lead to an untrusted pointer dereference in the wv dash core generic verify function. This affects Qualcomm...