CVE-2015-9129

CVE-2015-9129 affects Android devices using Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) where the TZ_PR_CMD_CONTENT_SET_PROP size parameter can cause an integer underflow when small. The issue’s impact is described as high to critical in CVSS terms, with potential remote/privilege im...

CVE-2015-9112

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 400, SD 800, SD 820, and SD 820A, lack of input validation in QSEE can cause potential buffer overflow...

CVE-2016-10483

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, improper input validation while processing SCM Command can lead to unauthorized memory access...

CVE-2016-10443

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...

CVE-2016-10477

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, and SD 820, while processing smart card requests, a buffer overflow can occur...

CVE-2016-10430

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, when executing a TA which has been granted privileges to the CPVC MINK class it is possible for the TA to access...

CVE-2016-10417

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2016-10424

CVE-2016-10424 concerns an issue in the LibPNG library used on Android devices. The provided records show that, for affected Android builds, upgrading LibPNG from 1.6.12 to 1.6.21 fixes multiple issues described by different CWEs. The Android CVE entry ties the vulnerability to the need for a pat...

CVE-2015-9173

CVE-2015-9173 affects Android devices with Qualcomm Snapdragon Mobile chips (SD410/12, SD617, SD650/52, SD800, SD808, SD810). The issue is a missing return-value check in memscpy, leading to memory corruption in the TQS App. The vulnerability is tied to patches applied for the 2018-04-01/2018-04-...

CVE-2015-9213

CVE-2015-9213 affects Android devices with Qualcomm Snapdragon/mobile platforms. The issue arises from the DIAG-EFS EFS2_DIAG_DELTREE command, handled by fs_diag_deltree_handler(), which is documented to delete files and directories only inside the /public folder. According to NVD, the vulnerabil...

CVE-2016-10487

CVE-2016-10487 is documented in Android bulletin context as a vulnerability in Qualcomm QuRT API where an untrusted pointer can be dereferenced. Affected platforms include Android devices using Qualcomm Snapdragon Automotive, Mobile, and Wear platforms (e.g., MDM9206/9607/9635M/9640/9645/9650/965...

CVE-2015-9224

The CVE-2015-9224 issue stems from a lack of input validation in QURTK_write() on Qualcomm Snapdragon platforms (listed: Snapdragon Automobile, Mobile, Wear, Small Cell SoCs and various SD/SM/DMM variants) running Android with patch levels older than 2018-04-05. Root cause: insufficient input val...

CVE-2016-10491

CVE-2016-10491 is an Android vulnerability affecting devices with Qualcomm Snapdragon Mobile and related SoCs. The issue arises from an integer overflow that can overflow a buffer in a QuRT API function, potentially enabling further impact on affected devices. Public references describe impact ac...

CVE-2016-10417

The CVE-2016-10417 entry describes a TOCTOU vulnerability in QTEE across numerous Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) including IPQ4019, MDM9xxx, SD-series chips. The issue arises from improper access control, enabling timing-based races that could compromise confidentiality,...

CVE-2014-10051

CVE-2014-10051 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 400, SD 410/12, SDX20). After loading a dynamically loaded code section, the I-Cache is not invalidated, allowi...

CVE-2016-10499

CVE-2016-10499 describes a memory leak in the IPSecurity module that occurs on Qualcomm Snapdragon-based Android devices when repeating IKE-Rekey, affecting a broad set of Snapdragon mobile/wear platforms (e.g., MDM92xx/SD series). The vulnerability’s impact is limited to availability (memory exh...

CVE-2016-10427

CVE-2016-10427 affects Qualcomm Snapdragon/RLC AM module in Android devices, causing denial of service via improper boundary check and triggering an assertion. Public details indicate impact on multiple Snapdragon generations (e.g., MDM92xx, MSM89xx, SD 210–SDX20) with exploitation requiring no u...

CVE-2016-10501

CVE-2016-10501 covers Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and related small cell SoCs (FSM9055, MDM9xxx, MSM8xxx, SD series up to SD 835). The issue is the improper input validation during image parsing , as described in the NVD/NVD-affiliated entry. Impact is high: p...

CVE-2014-9989

CVE-2014-9989 affects Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MDM9206/9607/9615/9625/9635M, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/600/615/16/SD 415/625/650/52/808/810/450, etc.). The vulnerability is in the USB management module and is triggered by...

CVE-2015-9194

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and SnapdragonHighMed2016, during module load at TZ Startup, memory statically allocated by...