CVE-2018-3593

CVE-2018-3593 describes a double-free condition in Android prior to the 2018-04-05 security patch level on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) including MDM9206/9607/9650, MSM8909W, SD 210/212/205, SD 400/425/430/450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808/810, S...

CVE-2018-3592

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if...

CVE-2018-3591

CVE-2018-3591 affects Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to the 2018-04-05 patch level. The root cause is that the default BOOT.BF.3.0 device programmer configuration enables the SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM flag, which exposes peek and pok...

CVE-2017-18145

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while the DPM native process is processing framework events, the iterator pointer is deleted aft...

CVE-2017-11011

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 835, a Use After Free condition can occur in a communication API...

CVE-2017-18142

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur...

CVE-2017-18071

CVE-2017-18071 affects Android on Qualcomm Snapdragon/Mobile platforms (including MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 425/430/450/625/650/52) and is described as allowing a potential bypass of the debug policy prior to the 2018-04-05 patch level. The vulnerability is documented in the ...

CVE-2017-18071

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, debug policy can potentially be bypassed...

CVE-2018-3594

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing ...

CVE-2017-18126

CVE-2017-18126 affects Android on Qualcomm-based devices (e.g., Snapdragon/WLAN stacks) where the original mac spoofing feature in probe requests for cfg80211 scan, vendor scan, and pno scan did not use randomized sequence numbers or randomized source addresses. This privacy-related flaw could af...

CVE-2018-3590

Technical details for CVE-2018-3590 are not publicly provided in the supplied documents. Monitor for updates; no concrete details (affected components, exploit info, or remediation) are included here.

CVE-2018-3594

CVE-2018-3594 affects Android devices using Qualcomm Snapdragon (Automobile, Mobile, Wear) where ID3 tag private frame parsing can trigger a buffer over-read during comparison of frame data to owner identifier strings. The issue is described as a buffer over-read in specific ID3 frame parsing pat...

CVE-2017-8274

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, an access control vulnerability exists in Core...

CVE-2017-18140

CVE-2017-18140 affects Android on Qualcomm Snapdragon Automotive/Mobile/Wear platforms. The issue occurs when processing a call disconnection; an attempt to print the RIL token-id to the debug log can lead to a Use After Free condition if eMBMS is enabled, potentially enabling a network-initiated...

CVE-2017-18129

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA internet protocol accelerator channels owned by one security domain to be controlled from other domains...

CVE-2017-18138

CVE-2017-18138 describes a buffer overflow in GERAN within Android prior to the 2018-04-05 patch level on Qualcomm-based devices (various Snapdragon Mobile/Wear platforms listed). The vulnerability is triggered in a Qualcomm GERAN component and may potentially allow memory corruption. The Connect...

CVE-2017-18130

CVE-2017-18130 is a buffer over-read vulnerability in Android media handling (ASF playback) affecting Qualcomm Snapdragon Mobile/Automobile/Wear platforms and a range of Snapdragon SoCs. Root cause: potential over-read during ASF file processing could lead to arbitrary code execution or crashes w...

CVE-2017-18130

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while...

CVE-2017-18134

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, a buffer overflow may potentially occur while processing a response from the SIM card...

CVE-2017-18132

CVE-2017-18132 affects Qualcomm Snapdragon components in Android prior to 2018-04-05 SPL, with an out-of-bounds access potentially occurring in tz_assign(). The issue is described as impacting Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, and MDM8996 devices. Connected sources cor...