CVE-2015-9108

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation performed on calls to a QSEE syscall may lead to arbitrary read/write or NUL...

CVE-2015-9221

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference...

CVE-2014-10045

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 820, and SDX20, buffer overflow...

CVE-2015-9115

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the...

CVE-2015-9217

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

CVE-2015-9156

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, when making a high speed Dual Carrier...

CVE-2016-10417

The CVE-2016-10417 entry describes a TOCTOU vulnerability in QTEE across numerous Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) including IPQ4019, MDM9xxx, SD-series chips. The issue arises from improper access control, enabling timing-based races that could compromise confidentiality,...

CVE-2016-10423

Mode C: CVE-2016-10423 describes a vulnerability in Android where, on Qualcomm Snapdragon Automotive and Mobile platforms (SD 425/430/450/625/650/52/820/820A), a Trusted Application that has opened the SPI bus to a device can be read by another Trusted Application due to non-exclusive access. The...

CVE-2016-10418

The CVE-2016-10418 entry describes an Android-related flaw where HLOS could enable PMIC debugging through TCSR_QPDI_DISABLE_CFG due to improper access control, affecting Qualcomm Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear devices (covering MDM9206/9650, various SD chips). The r...

CVE-2016-10406

CVE-2016-10406 affects Qualcomm-based Android devices (notably Snapdragon SoCs including MDM9650 and a wide range of SD 210/212/205, 410/12, 430, 450, 615/16/415, 617, 625, 650/52, 808, 810, 820, 835) where printing a pointer in wlan_qmi_err_cb prints the real kernel address regardless of kptr_re...

CVE-2014-10050

The CVE-2014-10050 entry concerns an access-control collision vulnerability in the replay protected memory block on Qualcomm Snapdragon Mobile platforms (MSM8996, MSM8939, MSM8976, MSM8917, SDM845, SDM660) running Android with patch levels prior to 2018-04-05. The issue is described as an access ...

CVE-2014-10051

CVE-2014-10051 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 400, SD 410/12, SDX20). After loading a dynamically loaded code section, the I-Cache is not invalidated, allowi...

CVE-2014-10056

Concrete technical details found: CVE-2014-10056 is an Android/OpenCL-related buffer overflow affecting OpenCL applications that call clBuildProgram() with a CL_DEVICE_TYPE_CPU in the device_list, on Qualcomm CPUs SD 210/212/205 (Android prior to 2018-04-05 SPL). The CNVD-2018-08830 entry confirm...

CVE-2014-10059

CVE-2014-10059 : In Android, prior to the 2018-04-05 security patch level, on certain Qualcomm Snapdragon platforms (MDM9615, MDM9625, SD 210/212/205, SD 400, SD 800), there is an improper access control in the ATCMD service that allows third-party components to access it without user knowledge. ...

CVE-2014-10045

Technical details about CVE-2014-10045 are not publicly provided in the supplied documents. Monitor for updates and additional disclosures in connected sources as they become available.

CVE-2015-9190

CVE-2015-9190 describes an integer overflow in boot_clobber_check_local_address_range() on certain Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/410/12/16, SD 600/615/16/SD 415, SD 808, SD 810, IPQ4019, MDM9xx, MSM89xx, etc.). The overflow can bypass the clobber protection check, leading ...

CVE-2015-9184

CVE-2015-9184 describes a buffer overflow in the Qualcomm WV dash core: lack of length checking in wv_dash_core_load_keys_v8() affects Android devices on Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear MSM8909W, plus multiple SD platforms (e.g., 210/212/205, 400, 410/12, 425, 430, 4...

CVE-2015-9194

CVE-2015-9194 affects Android on Qualcomm Snapdragon mobile platforms (SD 210/212/205, 400, 425, 427, 430, 435, 450, 617, 625, 650/652, 800, 845, Snapdragon_High_Med_2016). During TZ Startup module load, memory statically allocated by modules was not set to zero, allowing a module to run without ...

CVE-2015-9195

CVE-2015-9195 affects Android (pre-2018-04-05 patch level) on Qualcomm Snapdragon platforms (MDM9625/9635M/9650/9655; SD 400/410–12/615/16/415/617/650/52/808/810; SDX20) where a QTEE syscall handler can trigger a buffer overflow in the High-Level OS (HLOS). The issue is rooted in the QTEE syscall...

CVE-2015-9192

CVE-2015-9192 affects Android devices with Qualcomm Snapdragon components (Automobile, Mobile, Wear; various SD/MDM variants). The issue is an out-of-bounds memory access in the content protection manager caused by improper validation of incoming messages. This is described in the Android 2018-04...