CVE-2016-10407

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 835, an integer overflow leading to buffer overflow can occur...

CVE-2014-10039

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800, calling qseeappentryreturn without first calling qseeappentry will cause the stack to be restored to an older state resulting in a return to an unexpected location...

CVE-2016-10449

CVE-2016-10449 affects Android on Qualcomm Snapdragon devices (GNSS API) where, prior to the 2018-04-05 patch level, a NULL pointer dereference in GNSS API functions could occur. The issue is associated with Snapdragon Mobile and Wear platforms (e.g., MDM9206/9607/9640/9650, MSM8909W, SD 210–835 ...

CVE-2016-10493

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810,...

CVE-2016-10467

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, function cepkcs1psspaddingverifyautorecoversaltlen assumes that t...

CVE-2015-9144

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

CVE-2014-10059

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge...

CVE-2015-9202

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-9152

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 800, SD 810, SD 820, SD 820A, SD 835, and...

CVE-2015-9163

Summary (CVE-2015-9163) : In Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear: MDM9206/9650/8909W, SD 210–850 variants) prior to the 2018-04-05 SPL, a vulnerability in a PlayReady function can lead to information exposure (confidentiality impact). The issue is identified in mult...

CVE-2015-9208

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, and SD 810, the function tzbsppilverifysig does not...

CVE-2016-10429

CVE-2016-10429 concerns Android devices (Qualcomm Small Cell SoC, Snapdragon variants, and listed SD/X platforms) where, prior to the 2018-04-05 security patch level, three image types are loaded in the same manner without distinguishing them. The connected documents confirm the vulnerability des...

CVE-2016-10448

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

CVE-2016-10432

CVE-2016-10432 affects Android devices with Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 410/12, 425, 430, 450, 617, 625, 650/52, 820, 820A). The issue is a TOCTOU vulnerability during sanitization of userspace values passed to the tQSEE system call, potentially enabling pos...

CVE-2016-10454

CVE-2016-10454 affects Android devices with Qualcomm Snapdragon Mobile (SD 425, SD 430, SD 450, SD 625). In a QTEE API function, an array out-of-bounds index can occur, as described in the vulnerability entry with a high impact score (CVSS v3 base 9.8, CRITICAL). The connected documents place thi...

CVE-2015-9147

CVE-2015-9147 affects Android devices on Qualcomm Snapdragon platforms (MDM9625, MDM9635M, SD 400, SD 800) with patch levels before 2018-04-05. The flaw enables exploitation via userspace-provided pointer arguments that are not validated, as documented in the CVE description and corroborated by t...

CVE-2016-10407

CVE-2016-10407 affects Android platforms prior to the 2018-04-05 patch level, involving an integer overflow that can trigger a buffer overflow during a VT call on Qualcomm Snapdragon Mobile SoCs (SD 210/212/205, 400, 410/12, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820, 835). Af...

CVE-2014-10055

CVE-2014-10055 affects Android on Qualcomm Snapdragon Mobile SD 400/800 prior to 2018-04-05 patch level, describing potential leakage of protected contents if HLOS does not request security restoration for OCMEM xPU. The CVE entry provides CVSS metrics (2.0/5.0 and 3.0/7.5), indicating network/ve...

CVE-2015-9157

CVE-2015-9157 describes a race-condition in Android Qualcomm widevine support where rsp buffers passed to widevine commands in widevine_dash_cmd_handler() can be read or overflowed due to memory not being locked during time-of-check/time-of-use. Affected are Android devices with Qualcomm Snapdrag...

CVE-2016-10426

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, a buffer overflow can occur in SafeSwitch...