PT-2018-5512

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified FSM9055 affected versions not specified IPQ4019 affected versions not specified IPQ8064 affected versions not specified MDM9206 affected versions not specified MDM9607 affected...

Google Android Qualcomm Bootloader Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Bootloader is a Qualcomm-developed bootloader used in it. An information disclosure vulnerability exists in the Qualcomm Bootloader in Android. An attacker can exploi...

Google Android Qualcomm Bootloader Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Bootloader is a Qualcomm-developed bootloader used in it. An information disclosure vulnerability exists in the Qualcomm Bootloader in Android. An attacker can exploi...

Google Android Qualcommr SOC Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm SOC driver is one of the Qualcomm system-on-chip drivers. An elevation of privilege vulnerability exists in the Qualcommr SOC driver in Android. A remote attacker...

Code injection

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating the recovery message for eMMC devices, 1088 bytes of stack memory can potentially be leaked...

Meltdown and Spectre

Cisco Talos is aware of three new vulnerabilities impacting Intel, AMD, Qualcomm and ARM processors used by almost all computers. We are investigating these issues and although we have not observed exploitation of these vulnerabilities in the wild, that does not mean that it has not occurred. We...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02175)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Google Android Qualcomm Display elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Display is a display component developed by Qualcomm. An elevation of privilege vulnerability exists in Qualcomm Display in Android. A remote attacker can exploit this...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02177)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02176)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Google Qualcomm Bootloader Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm Bootloader is a Qualcomm-developed bootloader used in it. An elevation of privilege vulnerability exists in the Qualcomm Bootloader in Android. A remote attacker can...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02174)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02182)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

PT-2018-1968

Name of the Vulnerable Software and Affected Versions Qualcomm Widevine versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, ...

PT-2018-1969

Name of the Vulnerable Software and Affected Versions Qualcomm Widevine versions in MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130 Description The issue is related to a lack of input size checking, which can le...

PT-2018-1199

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile VERSION: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD...

PT-2018-1197

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835 Description The issue is related to the use of memory after it has been freed in the Qualcomm SPCOM component of the Android operating system. This ca...

PT-2018-1284

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-01-05 Description The issue is related to insufficient access control in the Qualcomm Trusted Execution Environment component of the Android operating system. This could allow a remote attacker to impact the...

CVE-2017-14911

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config...

Updated nonfree firmwares fixes security issues and adds new hw support

Updated nonfree firmwares fixes at least the following security issues: Broadcom firmware fixes: - dropping BRCM proprietary packets received over the air CVE-2016-0801 - adding length checks for TDLS action frames CVE-2017-0561 - adding length checks for WME IE CVE-2017-9417 Iwlwifi firmware...