CVE-2015-9220

Summary (CVE-2015-9220): An integer overflow occurs in the firmware image handling when the firmware section size is incorrectly encoded, affecting Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (including IPQ4019, IPQ8064, MDM9206/9607/9640/9650, QCA4531/6174A/6574...

CVE-2015-9113

CVE-2015-9113 affects Android on Qualcomm Snapdragon platforms (Automotive and MDM9625-based devices; SD 425/430/450/625/650/52/810/820/820A). The root cause is an untrusted pointer dereference in the QSEE Syscall without proper validation, enabling access to blacklisted memory. The NVD entry lis...

CVE-2015-9116

CVE-2015-9116 describes a pointer dereference flaw in a QTEE syscall handler on Android devices using Qualcomm Snapdragon Automotive and Snapdragon Mobile (SD 425/430/450/625/650/52/810/820/820A, and related chips). The untrusted pointer dereference occurs in the QTEE syscall path and affects And...

CVE-2015-9202

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-9199

CVE-2015-9199 describes a vulnerability in Android on Qualcomm Snapdragon platforms (Automobile and Mobile) affecting multiple SoCs including IPQ4019 and various SDx devices. The root cause is a non-secure region check performed during QSEE buffer address registration (passed by the HLOS) but not...

CVE-2015-9112

CVE-2015-9112 concerns a buffer overflow in the Qualcomm QSEE component used in Android on Snapdragon Auto and Snapdragon Mobile (MDM9625, SD 400/800/820/820A) prior to patch on 2018-04-05. The root cause is lack of input validation in QSEE, enabling a potential buffer overflow when processing ce...

CVE-2015-9153

CVE-2015-9153 describes a buffer over-read in a DRM function on Android devices with Qualcomm Snapdragon SoCs (mobile/automotive/wearable) prior to the 2018-04-05 patch level. The issue affects a wide range of Qualcomm chipsets (e.g., SD 210–850 families) and can lead to high-severity impact (per...

CVE-2015-9167

CVE-2015-9167 affects Qualcomm Snapdragon platforms (Automobile and Mobile) across SD 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, and 820A. Description: an integer underflow in an EMM command can occur. The issue is documented in multiple sources (NVD, CVE lists)...

CVE-2015-9215

CVE-2015-9215 describes a null pointer dereference in the USB bootloader find_ep() on Qualcomm Snapdragon Mobile SKUs (e.g., MDM9615, MDM9625, MDM9635M, SD 810) due to improper input validation. Affected platforms include Android builds prior to the 2018-04-05 patch level. The issue is rated CRIT...

CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9122

CVE-2015-9122 describes a possible buffer overflow in Android on Qualcomm Snapdragon/mobile SoCs when a SIM response exceeds 64 KB for a stream APDU command. Affected products include a wide range of Qualcomm/Snapdragon modems and Android devices, with the issue stemming from handling large APDU ...

CVE-2015-9130

CVE-2015-9130 describes a NULL pointer dereference in a PlayReady function on Android running on Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MSM8909W; SD 210/212/205; 400; 410/12; 615/16/SD 415; 617; 650/52; 808; 810) prior to the 2018-04-05 security patch level. The issue is exploitabl...

CVE-2015-9133

CVE-2015-9133 affects Android devices with Qualcomm Snapdragon Mobile chips (SD 400/410/12, SD 617, SD 650/52, SD 800, SD 810). When Widevine App TZ_WV_CMD_DECRYPT_VIDEO is called with a size that is too large, an integer overflow may occur in the affected components. The vulnerability is describ...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

CVE-2015-9182

Technical details about CVE-2015-9182 (affected Qualcomm Android components, exact versions, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from NVD/Android bulletins for concrete impact and remediation.

CVE-2015-9141

CVE-2015-9141 impacts Android on Qualcomm Snapdragon platforms (e.g., MDM9206/9607/9635M, MSM8909W, SD 210–SD 810) in HHO scenarios. During the ACQ procedure, the search database can be incorrectly updated, causing memory corruption due to a buffer overflow. NVD references list a high/critical ri...

CVE-2015-9142

CVE-2015-9142 describes a bounds-check omission for a vtable index in the DAL-TO-QDI conversion framework affecting multiple Qualcomm/Snapdragon mobile platforms (Android before 2018-04-05 SPL or earlier patch level). Affected products include a broad set of Snapdragon/SDM devices listed in the d...

CVE-2015-9143

CVE-2015-9143 affects Android devices with Qualcomm Snapdragon platforms (including IPQ4019, MDM9xxx, MSM89x, SD family) prior to the 2018-04-05 security patch level. The issue is a buffer overflow that occurs when reading CDT from eMMC with a very large meta offset exceeding the default CDT-arra...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...

CVE-2015-9140

CVE-2015-9140 affects Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and listed Small Cell SoCs (e.g., FSM9055, MDM9xxx, MSM8909W, SD family) where the online memory dump feature can allow unauthorized memory access. Root cause: improper protection in the online memory dump path...