CVE-2017-18137

CVE-2017-18137 is a high-severity vulnerability affecting Android on Qualcomm Snapdragon platforms (MDM9640/9645/9650/9655; SD 450/625/650/52/810/820/835) where, prior to the 2018-04-05 patch level, processing the IPv6 PDP address of a PDP context could trigger a buffer overflow. The publicly doc...

CVE-2017-18072

CVE-2017-18072 affects Android on Qualcomm Snapdragon/mobile platforms (list of affected SoCs) where probe requests from a user’s device reveal information elements that specify supported Wi‑Fi features, creating a potential privacy risk if sniffed. The root cause is the disclosure of Wi‑Fi infor...

CVE-2017-18073

CVE-2017-18073 is a vulnerability affecting Android on Qualcomm-based devices (e.g., Snapdragon Mobile/Automotive/Wear) where the High-severity issue could allow the HLOS to gain unauthorized memory access. The vulnerability is categorized under Qualcomm closed-source components and is listed in ...

CVE-2017-18074

CVE-2017-18074 affects Android on Qualcomm Snapdragon devices (mobile and Wear) before the 2018-04-05 security patch level. When playing a .wma file with a modified media header that has a non-standard bytes-per-second value, a reachable assert may occur in affected media components. According to...

CVE-2017-18133

CVE-2017-18133 affects Android on Qualcomm-based devices (Snapdragon Mobile/Wear). The issue is an out-of-bounds access in the ebi channel array, reported before the 2018-04-05 patch level. The Android bulletin for 2018-04-01/2018-04-05 indicates patches were released; devices with patch level 20...

CVE-2018-3590

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, a Use After Free condition can occur in RIL while handling requests from Android...

CVE-2017-8274

CVE-2017-8274 is an access-control vulnerability described for Android pre-2018-04-05 patch level, affecting Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607, MSM8909W, SD 210/212/205, 425, 430, 450, 625, 650/52, etc.) in the Core. The Android bulletin and NVD entries ...

CVE-2017-8275

CVE-2017-8275 describes an integer overflow in a video library affecting Android devices on Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/430/450/617/625/650/52/800/808/820/835). The issue is triggered in the video processing code and is documented as a vulnerability with network attack v...

CVE-2017-18138

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 81...

CVE-2018-3589

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr capture size is larger than the maximum size of a diag logPacket, which can lead to a buffer overflow when the sample buffer is copied to the logPacket buffer...

CVE-2017-18072

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, S...

CVE-2017-18074

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, SD 835, while...

CVE-2017-18132

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, MDM8996, an out-of-bounds access can potentially occur in tzassign...

CVE-2017-18125

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when secure camera is activated it stores captured data in protected buffers. The TEE application which uses secure camera...

CVE-2018-3592

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if...

CVE-2017-18140

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD...

CVE-2017-18133

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an out of bound access for ebi channel array can potentially occur...

CVE-2017-18127

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted namelen and valuelen values ar...

CVE-2017-18139

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 81...

CVE-2018-3593

CVE-2018-3593 describes a double-free condition in Android prior to the 2018-04-05 security patch level on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) including MDM9206/9607/9650, MSM8909W, SD 210/212/205, SD 400/425/430/450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808/810, S...