CVE-2016-10501

CVE-2016-10501 covers Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and related small cell SoCs (FSM9055, MDM9xxx, MSM8xxx, SD series up to SD 835). The issue is the improper input validation during image parsing , as described in the NVD/NVD-affiliated entry. Impact is high: p...

CVE-2016-10446

CVE-2016-10446 describes an issue where incorrect OCIMEM MPU configuration in Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) could allow non-secure software to access OCIMEM memory used by TrustZone (TZ). Affected components include OCIMEM on various Snapdragon platforms (e.g., SD 210/2...

CVE-2016-10427

CVE-2016-10427 affects Qualcomm Snapdragon/RLC AM module in Android devices, causing denial of service via improper boundary check and triggering an assertion. Public details indicate impact on multiple Snapdragon generations (e.g., MDM92xx, MSM89xx, SD 210–SDX20) with exploitation requiring no u...

CVE-2016-10467

Technical details about CVE-2016-10467 are not publicly available in the provided connected documents. Please monitor for updates from official advisories.

CVE-2016-10441

CVE-2016-10441: In Android on Qualcomm Snapdragon platforms (various SD/MDM and X series) before the 2018-04-05 patch level, improper offset validation in the video parser can cause a buffer overflow. CVSS indicates high to critical impact across confidentiality, integrity, and availability; expl...

CVE-2016-10487

CVE-2016-10487 is documented in Android bulletin context as a vulnerability in Qualcomm QuRT API where an untrusted pointer can be dereferenced. Affected platforms include Android devices using Qualcomm Snapdragon Automotive, Mobile, and Wear platforms (e.g., MDM9206/9607/9635M/9640/9645/9650/965...

CVE-2016-10486

CVE-2016-10486 affects Android devices with Qualcomm Snapdragon Wireless/Automotive SoCs (e.g., MDM9640/9645, SD 210/212/205, 450, 617, 625, 650/52, 808, 810, 820, 820A, etc.). The root cause is that the PD failure reason string from user PD is used directly in root PD; if the buffer in Diag F3 A...

CVE-2016-10491

CVE-2016-10491 is an Android vulnerability affecting devices with Qualcomm Snapdragon Mobile and related SoCs. The issue arises from an integer overflow that can overflow a buffer in a QuRT API function, potentially enabling further impact on affected devices. Public references describe impact ac...

CVE-2016-10481

CVE-2016-10481 affects Qualcomm WLAN firmware in Android devices; when WLAN FW receives the WMI_STA_SMPS_PARAM_CMDID ioctl in a not-associated state and the virtual channel handle is unassigned, the code does not null-check the handle, causing an assert. The entry is mapped to a high-severity, ne...

CVE-2016-10480

CVE-2016-10480: Android Qualcomm-exif memory corruption due to invalid integer overflow checks in exif parsing, affecting numerous Snapdragon/mobile/wear platforms prior to 2018-04 patch levels. Impact described as memory corruption with high/critical severity in CVSS assessments. Patches exist i...

CVE-2015-9149

CVE-2015-9149 affects Android devices with Qualcomm Snapdragon chipsets (Automotive/Mobile/Wear families). In a DIAG ioctl handler , an untrusted pointer dereference could occur, enabling high-severity impact per CVSS (network, 3.0: 9.8). Provider details show a critical, remote-executable risk, ...

CVE-2015-9137

CVE-2015-9137 describes a vulnerability in Android where, on Qualcomm Snapdragon platforms (various models listed), several EFS2 DIAG command handlers fail to call fs_diag_access_check(), due to an insufficient access-control check in the DIAG path. The issue is triggered on Android devices using...

CVE-2015-9139

CVE-2015-9139 describes an input-validation issue during SSL handshake negotiation on Android devices with Qualcomm Snapdragon chipsets (various models) prior to the April 5, 2018 patch level. The vulnerability path is not elaborated beyond “improper input validation” during SSL negotiation, and ...

CVE-2015-9146

CVE-2015-9146 affects Android devices with Qualcomm Snapdragon SoCs (SD 400/800/835/845/850, SDX20 and related MDM variants) where QDI read, write, or ioctl operations may pass an unvalidated pointer, enabling access during a delayed response. The issue is described as a pointer validation bug in...

CVE-2015-9218

CVE-2015-9218 describes a hang in Android devices when processing certain HEVC clips, occurring on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 625, 650/52, 800, 808, 810, 820, 835, 845, SDM630/636/660, Snapdragon_High_Med_2016) ...

CVE-2015-9213

CVE-2015-9213 affects Android devices with Qualcomm Snapdragon/mobile platforms. The issue arises from the DIAG-EFS EFS2_DIAG_DELTREE command, handled by fs_diag_deltree_handler(), which is documented to delete files and directories only inside the /public folder. According to NVD, the vulnerabil...

CVE-2015-9221

CVE-2015-9221 pertains to Android up to early 2018 patches, where Qualcomm Snapdragon mobile platforms (SD 400/800/810) were vulnerable due to lack of validation of pointers passed by secure apps, enabling an untrusted pointer dereference. The issue affects Android components relying on secure ap...

CVE-2015-9108

The CVE-2015-9108 entry relates to Android devices with Qualcomm QSEE components. The vulnerability is triggered in scenarios where there is insufficient address-argument validation when calling a QSEE syscall, potentially allowing an attacker to perform arbitrary read/write operations or trigger...

CVE-2015-9110

CVE-2015-9110 is described in the connected CNVD/NVD entries as: on Android, before the 2018-04-05 security patch level, Qualcomm closed‑source components (Qualcomm Snapdragon Mobile/Automotive) did not validate the address parameter in the qsee_get_secure_state syscall. The root cause is the mis...

CVE-2015-9171

CVE-2015-9171 describes a buffer over-read in OEMCrypto_Dash_InstallEncapKeybox() when keyBoxLength exceeds TZ_WV_MAX_DATA_LEN (20k) on various Qualcomm/Android components. Affected: Android devices with Qualcomm Snapdragon Automotive/Mobile/Wear stack listed in the description (multiple SoCs). R...