CVE-2016-10471

CVE-2016-10471 affects Android on Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 425/430/450/625/650/52/820/820A). The issue is an unsigned RTIC health report that can be tampered with by malware executing in the context of the HLOS, potentially enabling unauthorized modificat...

CVE-2016-10472

CVE-2016-10472 affects Qualcomm Snapdragon mobile and wearable SoCs (e.g., MDM9206/9607/9650, MSM8909W, SD 210/212/205, 400, 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835, SDX20). Root cause: HLOS kernel failed to check address and size passed to TZ_INFO_GET_SE...

CVE-2016-10482

CVE-2016-10482 affects Android devices on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to 2018-04-05 (or earlier patch levels). The issue occurs while processing downlink information, where an assert can be reached. Affected families include MDM9206/9607/9625/9635M/9640/9645/965...

CVE-2016-10483

CVE-2016-10483 affects Android devices with Qualcomm Snapdragon Mobile SoCs (SD 410/12, SD 615/16, SD 415, SD 808, SD 810). Root cause is improper input validation while processing SCM Command, leading to unauthorized memory access. According to the Android bulletin, these issues were addressed w...

CVE-2016-10478

Technical details of CVE-2016-10478 are not publicly provided in the supplied documents. Monitor for updates from NVD/Android bulletin; no additional product/vendor/version specifics are included here.

CVE-2016-10479

The CVE-2016-10479 issue affects Android devices on Qualcomm Snapdragon platforms (including MDM9607/MDM9615/MDM9635M/MDM9640 and SD 210/212/205, 400, 600, 615/16/415, 617, 650/52, 800, 810, 820) where an arbitrary length value from an incoming message to the QMI Proxy can cause an out-of-bounds ...

CVE-2016-10462

CVE-2016-10462 affects Android platforms with Qualcomm SoCs where HLOS Access Control policy could allow access to Slimbus, GPU, and GIC resources due to insufficient isolation in certain Snapdragon generations (e.g., SD 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 808, 810, 820/8...

CVE-2016-10448

CVE-2016-10448 affects Android on Qualcomm Snapdragon platforms (multiple SoCs) where addSA/updateSA commands on the same SA can race. The root cause is that APIs addSA and updateSA access the global ipsec_sa_list[] without mutex protection, enabling memory corruption under concurrent operations....

CVE-2016-10428

CVE-2016-10428 affects Android devices with Qualcomm Snapdragon Automotive and Snapdragon Mobile (SD 425, 430, 450, 625, 650/52, 820, 820A). The issue is in the HMAC verification of a counter file, where an insecure memcmp may enable a timing attack. Public details from NVD reiterate this descrip...

CVE-2016-10433

CVE-2016-10433 is an Android/Qualcomm TOCTOU vulnerability during SSD image decryption that can cause memory corruption on affected Snapdragon Mobile/Automotive/Wear platforms (various SDP/SD devices). The issue affects Android images prior to the 2018-04-05 security patch level; Android/patched ...

CVE-2016-10430

CVE-2016-10430 affects Android on certain Qualcomm platforms (Snapdragon Automobile and Snapdragon Mobile) prior to the 2018-04-05 patch level. The issue arises when a TA (trusted application) that has privileges to the CPVC MINK class executes and is able to access methods exposed by the CPVC in...

CVE-2016-10466

CVE-2016-10466 affects Android devices with Qualcomm Snapdragon mobile platforms (various Snapdragon families listed in the description). The vulnerability arises during SSL/TLS handshakes: if the RNG function (crypto API) returns an error, the SSL implementation uses a hard-coded random value, p...

CVE-2016-10437

CVE-2016-10437 is an information-disclosure vulnerability affecting Android devices with Qualcomm networking components. In affected Android versions prior to 2018-04-05 patch level (and related patches for various Qualcomm SoCs such as Small Cell, Snapdragon Mobile/Wear families and SDR devices ...

CVE-2016-10438

CVE-2016-10438 is an information exposure issue in Android devices affected by Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055, IPQ4019/IPQ8064, and various SD/SoC families. The root cause is logging of debug statements using %p, which could expose kernel or driver pointers. The repor...

CVE-2016-10426

CVE-2016-10426 documents a buffer overflow in SafeSwitch affecting Android devices powered by Qualcomm Snapdragon (Automobile and Mobile) across multiple SD cores (410/12, 425, 430, 450, 617, 625, 650/52, 810, 820, 820A). Root cause is a buffer overflow in SafeSwitch; exploitation details are not...

CVE-2016-10459

CVE-2016-10459 describes a memory exhaustion issue in Android devices during calls on Qualcomm Snapdragon platforms (various MDM and SD families). The vulnerability affects Android builds before the 2018-04-05 patch level (and older patch levels). Root cause is memory exhaustion during call handl...

CVE-2015-9118

CVE-2015-9118 affects Android systems with Qualcomm ADSP QDI Root-PD driver in Snapdragon SoCs (e.g., MDM9615/9625/9635M; SD 400/410/12/615/16/SD 415/800/808/810). The vulnerability arises from untrusted arguments from User PD that may cause integer overflow, leading to a buffer overflow. This is...

CVE-2015-9119

Technical details about CVE-2015-9119 are not publicly provided in the connected documents. Affected products, exploitation, and fixes are not specified here. Monitor for updates from the sources in the Initial document (Android bulletin, NVD) for remediation.

CVE-2015-9114

Summary: CVE-2015-9114 affects Android devices with Qualcomm Snapdragon components, where the qsee_query_counter syscall may dereference an untrusted pointer due to missing address argument validation. This could allow a local/user-privilege attacker to trigger arbitrary behavior in certain Qualc...

CVE-2015-9145

CVE-2015-9145 affects Android devices with Qualcomm Snapdragon automotive/mobile/wear platforms (e.g., MDM92xx, SDxx family). The issue arises from a lack of input validation in NPA driver functions, enabling a null pointer dereference. Public details confirm the affected product families and pat...