CVE-2014-10054

CVE-2014-10054 concerns Android/QCOM BT HCI related privilege escalation due to lack of input validation when processing BT HCI commands. The core issue affects various Snapdragon/Qualcomm platforms (Android before 2018-04-05 SPL; see CNVD/NVD entries) and has a high/critical CVSS potential (up t...

CVE-2016-10497

CVE-2016-10497 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800/808/810/820/8...

CVE-2015-9128

CVE-2015-9128 describes a buffer overread caused by lack of validation of the buffer size in Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) across multiple SD/x variants. The issue affects devices with Android before the 2018-04-05 security patch level and is addressed by the...

CVE-2016-10473

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...

CVE-2015-9151

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated...

CVE-2015-9141

CVE-2015-9141 impacts Android on Qualcomm Snapdragon platforms (e.g., MDM9206/9607/9635M, MSM8909W, SD 210–SD 810) in HHO scenarios. During the ACQ procedure, the search database can be incorrectly updated, causing memory corruption due to a buffer overflow. NVD references list a high/critical ri...

CVE-2014-10063

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device...

CVE-2015-9187

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

CVE-2015-9181

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, a...

CVE-2015-9178

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, S...

CVE-2016-10423

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, when a Trusted Application has opened the SPI interface to a particular device, it is possible for another Trusted...

CVE-2014-9995

CVE-2014-9995 (Android/Qualcomm) has concrete details in CNVD-2018-08827: A buffer overflow in drmprov_cmd_verify_key() on Qualcomm SD 400/800 affects Android versions before the 2018-04-05 patch level. The issue stems from not validating feature_name_length, with a potential integer wrap in the ...

CVE-2015-9113

CVE-2015-9113 affects Android on Qualcomm Snapdragon platforms (Automotive and MDM9625-based devices; SD 425/430/450/625/650/52/810/820/820A). The root cause is an untrusted pointer dereference in the QSEE Syscall without proper validation, enabling access to blacklisted memory. The NVD entry lis...

CVE-2015-9112

CVE-2015-9112 concerns a buffer overflow in the Qualcomm QSEE component used in Android on Snapdragon Auto and Snapdragon Mobile (MDM9625, SD 400/800/820/820A) prior to patch on 2018-04-05. The root cause is lack of input validation in QSEE, enabling a potential buffer overflow when processing ce...

CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9130

CVE-2015-9130 describes a NULL pointer dereference in a PlayReady function on Android running on Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MSM8909W; SD 210/212/205; 400; 410/12; 615/16/SD 415; 617; 650/52; 808; 810) prior to the 2018-04-05 security patch level. The issue is exploitabl...

CVE-2015-9182

Technical details about CVE-2015-9182 (affected Qualcomm Android components, exact versions, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from NVD/Android bulletins for concrete impact and remediation.

CVE-2014-9988

CVE-2014-9988 affects Android on Qualcomm Snapdragon devices (Automotive, Mobile, Wear, and listed SD families). Root cause: lack of input validation for message length leads to a buffer over-read in drm_app_encapsulate_save_keys. Impact: critical risk across confidentiality, integrity, and avail...

CVE-2016-10444

CVE-2016-10444 affects Android devices using Qualcomm Snapdragon components (Automotive, Mobile, Wear) with chips listed (SD 210/212/205, 425, 430, 450, 625, 820, 820A, 835, etc.). The root cause is a changed SMMU Access Control Policy that blocks the HLOS from accessing BLSP and BAM resources. P...

CVE-2016-10457

CVE-2016-10457 affects Android on Qualcomm Snapdragon-based devices (multiple SoCs listed) where an app requests more permissions than required. The issue is described as a permission overreach with a high-impact risk profile (CVSS v3: 9.8, Network, No user interaction) and is documented for Andr...