CVE-2015-9201

CVE-2015-9201 describes an integer overflow in tzbsp that can lead to privilege escalation on multiple Qualcomm Snapdragon/Android platforms (Automotive, Mobile, Wear, and related SoCs). The affected components and devices span Qualcomm’s tzbsp-related code paths used in Snapdragon lines (e.g., I...

CVE-2015-9204

CVE-2015-9204 describes a buffer overread in Android on Qualcomm Snapdragon mobile/wear platforms (various SD series) when cchFriendlyName exceeds TZ_PR_MAX_NAME_LEN in playready_leavedomain_generate_challenge(). The issue is triggered in affected Android versions prior to the 2018-04-05 security...

CVE-2015-9210

CVE-2015-9210 affects Android devices using Qualcomm Snapdragon components (including Snapdragon Automobile, Mobile, Wear, and various SD variants listed). The issue is a lack of input validation in playready_licacq_process_response(), which can lead to memory over-read. The cited CVSS v3.0 metri...

CVE-2015-9211

CVE-2015-9211 describes a buffer overread in the PlayReady module affecting Android devices with Qualcomm Snapdragon ranges (Automobile, Mobile, Wear) prior to the 2018-04-05 patch level. The issue occurs when a large PlayReady message is processed, potentially impacting confidentiality, integrit...

CVE-2015-9205

In CVE-2015-9205, a buffer over-read can occur in a PlayReady API function on Android devices with Qualcomm SD series (MSM8909W, SD210/SD212/SD205, SD410/12, SD615/16/SD415, SD808, SD810). The issue affects Android before 2018-04-05 or earlier patch levels; CVSS indicates a critical impact (high ...

CVE-2015-9208

CVE-2015-9208 affects Android on Qualcomm Snapdragon devices (various SoCs listed). The vulnerability arises because tzbsp_pil_verify_sig() does not strictly constrain the ELF/program headers and hash segment pointers to secure memory; it only ensures addresses are not in non-secure memory, allow...

CVE-2015-9188

The CVE-2015-9188 issue concerns Qualcomm/Android devices where, before the 2018-04-05 patch level, the Secure DEMUX command handler may write an error code into a response buffer without validating the buffer length, risking memory corruption. Affected products include various Snapdragon Automot...

CVE-2015-9189

The CVE-2015-9189 issue affects Android devices with Qualcomm Snapdragon SoCs (e.g., IPQ4019, MDM9xxx, SD 210/212/205, SD 400/410/12, SD 600/615/16/SD 415, SD 808, SD 810) prior to the 2018-04-05 patch level. The root cause is a vulnerability in the TZ application command handling (tz_app_cmd_han...

CVE-2015-9185

Technical details such as affected products, component, root cause, impact, and fixes are not publicly provided in the supplied documents; monitor for updates.

CVE-2015-9196

CVE-2015-9196 affects Android on Qualcomm Snapdragon Mobile and Small Cell SoCs (FSM9055, MDM9635M, SD 400, SD 800). Root cause: improper input validation in tzbsp_ocmem can lead to privilege escalation. Impact: high/critical across network attack vector with no user interaction required (per CVS...

CVE-2015-9197

Mode C: CVE-2015-9197 affects various Qualcomm Snapdragon/mobile SoCs (e.g., MDM9xxx, SD 210–618 families) when enabling XPUs for SMEM partitions. If XPUs configuration values are out of range, memory access outside SMEM can occur and set incorrect XPU configurations, potentially enabling remote ...

CVE-2015-9212

The CVE-2015-9212 issue affects Qualcomm Snapdragon platforms (Mobile and Wear MSM8909W; SD 210/212/205; SD 400; SD 410/12; SD 800). Root cause: lack of input validation while processing TZ_PR_CMD_SAVE_KEY leads to a buffer overread. Impact is described as high across confidentiality, integrity, ...

CVE-2015-9223

CVE-2015-9223 describes a buffer overflow in Android prior to the 2018-04-05 security patch level when processing an audio buffer on Qualcomm Snapdragon mobile platforms (MDM9615, MDM9625, MDM9635M, SD 400/600/800). The issue affects Android devices using these Qualcomm components and could enabl...

CVE-2014-9993

CVE-2014-9993 is a buffer overread vulnerability affecting Android on Qualcomm Snapdragon platforms (including automotive/mobile/wear MDMs and Snapdragon SD/SoC families) that may occur when provisioning content with a large message. The available sources describe the issue as a large-message pro...

CVE-2014-9991

CVE-2014-9991 describes a buffer overflow in Qualcomm closed-source Android components when USB mass storage transfers exceed 16kB. Public sources (CNVD-2018-08826, NVD entry) tie this issue to Android devices using Qualcomm Snapdragon/mobile platforms (e.g., MDM9206/9625/9635M/etc., SD series) a...

CVE-2014-9985

CVE-2014-9985 affects Android on Qualcomm Snapdragon platforms (MDM9635M, SD 400, SD 800). The vulnerability arises from a TOCTOU race condition that can bypass error-condition checks, causing undefined behavior in the affected components. Based on the initial and linked references, the issue is ...

CVE-2014-9994

CVE-2014-9994 affects Android on Qualcomm Snapdragon Mobile (SD 400/SD 800) prior to the 2018-04-05 patch level. The root cause is lack of input validation that can trigger an integer overflow, subsequently leading to a buffer overflow. The vulnerability is described as potentially critical (CVSS...

CVE-2016-10485

CVE-2016-10485 is a buffer overflow vulnerability described as due to lack of proper bounds checking in Android on Qualcomm Snapdragon/mobile components (lists include IPQ4019, MDM9xxx, MSM8xxx, SD 210/212/205, SD 400/410/12, SD 615/16/415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SDX20). The w...

CVE-2016-10495

CVE-2016-10495 affects Android on Qualcomm Snapdragon Mobile MDM9635M prior to the 2018-04-05 security patch level. The description states that changes were made to map the scan type value to an index value that is in range, implying a flaw in value handling within the affected component. The con...

CVE-2016-10476

CVE-2016-10476 affects Android on Qualcomm Snapdragon/mobile platforms (e.g., MSM/SD family). The issue is missing array index checks on the app index in function qcril_uim_clear_encrypted_pin, causing out-of-bounds reads when the app index is too large. Documented in multiple sources as a vulner...