CVE-2014-10062

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810...

CVE-2014-10047

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur...

CVE-2015-9152

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 800, SD 810, SD 820, SD 820A, SD 835, and...

CVE-2015-9160

CVE-2015-9160 affects Qualcomm‑based Android devices (Snapdragon) prior to 2018-04-05 SPLs, where an integer overflow may occur in TZBSP_GFX_DCVS_UPDATE_ID when HLOS graphics driver busy time and total time values are very large. The issue is documented in NVD with a CVSS v3.0 base score of 9.8 (...

CVE-2015-9186

CVE-2015-9186 affects Android on Qualcomm Snapdragon family (automobile, mobile, wearables) and several SoCs (e.g., SD 210/212/205, 400/410, 425/430/450, 615/625/650/52, 800/808/810/820/835/845, 850) where a buffer over-read can occur in a PlayReady API function. The issue is documented with a hi...

CVE-2015-9203

CVE-2015-9203 describes a buffer overread caused by missing input validation in playready_set_domainid on a wide range of Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) and various Snapdragon SoCs. This affects Android versions up to the 2018-04-05 security patch level; the issue is doc...

CVE-2014-10063

CVE-2014-10063 affects Qualcomm-based Android devices (Qualcomm Snapdragon Mobile MDM9625 and SD 800). The fuse at secure boot was not blown correctly, per Android bulletin context. Impact is defined as a fault in the secure-fuse state; the issue is mitigated by the 2018-04-05 security patch leve...

CVE-2014-10063

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device...

CVE-2014-10052

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, S...

CVE-2015-9213

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD...

CVE-2016-10458

CVE-2016-10458 describes a Snapdragon/Qualcomm bootchain issue where qsee_log buffers are not properly unallocated or cleared before Linux boots. The root cause is improper handling of qsee_log in the bootchain, which could lead to Linux memory corruption. The mitigation described across sources ...

CVE-2015-9169

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, buffer over-read in QSEE app may cause confidential information to be...

CVE-2014-10054

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...

CVE-2014-10046

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the...

CVE-2014-10046

CVE-2014-10046 is an Android/Qualcomm PDN throttle use-after-free issue in which the PDN throttle info block is freed without clearing the active timer on affected Qualcomm Snapdragon platforms (MDM9615/9625/9635M and SD 210/212/205, 400, 410/12, 615/16/ SD 415, 800, 808, 810). The vulnerability ...

CVE-2016-10409

CVE-2016-10409 describes a TOCTOU vulnerability in RPMB request construction on Android devices using Qualcomm platforms (Snapdragon Automotive and Snapdragon Mobile) prior to the 2018-04-05 security patch level. The issue arises when RPMB requests are composed using buffers controlled by the hig...

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

CVE-2015-9207

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of input validation in playreadygetadditionalresponsedata could...

CVE-2014-10050

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8996, MSM8939, MSM8976, MSM8917, SDM845, and SDM660, access control collision vulnerability when accessing the replay protected memory block...

CVE-2015-9127

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, and SD 810, possible null pointer dereference occurs due to failure of memory allocation when a large value is passed...