CVE-2015-9118

CVE-2015-9118 affects Android systems with Qualcomm ADSP QDI Root-PD driver in Snapdragon SoCs (e.g., MDM9615/9625/9635M; SD 400/410/12/615/16/SD 415/800/808/810). The vulnerability arises from untrusted arguments from User PD that may cause integer overflow, leading to a buffer overflow. This is...

CVE-2015-9114

Summary: CVE-2015-9114 affects Android devices with Qualcomm Snapdragon components, where the qsee_query_counter syscall may dereference an untrusted pointer due to missing address argument validation. This could allow a local/user-privilege attacker to trigger arbitrary behavior in certain Qualc...

CVE-2015-9223

CVE-2015-9223 describes a buffer overflow in Android prior to the 2018-04-05 security patch level when processing an audio buffer on Qualcomm Snapdragon mobile platforms (MDM9615, MDM9625, MDM9635M, SD 400/600/800). The issue affects Android devices using these Qualcomm components and could enabl...

CVE-2014-9985

CVE-2014-9985 affects Android on Qualcomm Snapdragon platforms (MDM9635M, SD 400, SD 800). The vulnerability arises from a TOCTOU race condition that can bypass error-condition checks, causing undefined behavior in the affected components. Based on the initial and linked references, the issue is ...

CVE-2014-10044

CVE-2014-10044 affects Android on Qualcomm Snapdragon devices, where in the time daemon an unauthorized user could modify the system time and cause an array index to go out of bounds. Affected platforms include Snapdragon MDM9615/9625/9635M and SD series 210/212/205, 400, 617, 800, and 820, with ...

CVE-2015-9183

CVE-2015-9183 affects Android devices built with Qualcomm Snapdragon chips (SD 410/12, SD 617, SD 650/52, SD 800, SD 808, SD 810). In the TQS QSEE application, parsing the "Set Certificates" command can trigger an integer overflow that may overflow a buffer. This is described as a high-severity, ...

CVE-2015-9178

CVE-2015-9178 is a memory-corruption issue affecting Android devices with Qualcomm Snapdragon SoCs (incl. Snapdragon Automobile, Mobile, Wear families and related SD ranges up to SD 850) when processing the rmp secure command. The vulnerability allows memory corruption if the response buffer is s...

CVE-2015-9166

CVE-2015-9166 concerns DRM provisioning in QSEE-based components on Qualcomm Snapdragon platforms. The issue arises because the finalize_prov_flag.data mechanism, intended to prevent further provisioning after initial provisioning, is not sufficiently checked, allowing provisioning to proceed eve...

CVE-2015-9132

CVE-2015-9132: In Android on Qualcomm Snapdragon mobile/Small Cell SoCs (FSM9055 and SD variants listed) prior to the 2018-04-05 patch level, there is an arbitrary memory read due to an untrusted pointer dereference when handling HLOS-controlled values passed to the QSEE syscall helper. Affected ...

CVE-2015-9126

CVE-2015-9126 is a buffer overflow vulnerability affecting Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, 425, 430, 450, 617, 625, 650/52, 808, 810, 820, 835, 845, 850, SDX20). The flaw occurs while processing a 1X...

CVE-2015-9134

CVE-2015-9134 affects Android devices with Qualcomm Snapdragon Mobile (SD 410/12, SD 615/16/SD 415, SD 810). The issue arises while processing QSEE Syscall qsee_macc_gen_ecc_privkey, where an untrusted pointer dereference can lead to arbitrary writes. Publicly available Android bulletin entries p...

CVE-2015-9136

CVE-2015-9136 describes a buffer overflow in the Android/Qualcomm host driver during pre-auth requests, caused when FT IEs from the supplicant exceed the expected size. The vulnerability affects a wide range of Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206, MDM9607, MDM9...

CVE-2015-9174

CVE-2015-9174 describes a memory overwrite risk in QSEE due to lack of validation of a return value before buffer allocation. Affected Qualcomm Snapdragon Mobile devices include SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810. CVSS shows 3.0 base score 9.8 (CRITICAL) with network attack ...

CVE-2015-9152

The CVE-2015-9152 issue affects Android devices using certain Qualcomm Snapdragon modem/SoC families (e.g., IPQ4019, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 615/16/415, 625, 800, 810, 820/820A, 835, Snapdragon_High_Med_2016) where modem-owned regions can be reached from the secure s...

CVE-2015-9161

CVE-2015-9161 describes a TOCTOU-induced buffer overflow in playready_reader_bind() affecting Android on Qualcomm Snapdragon platforms (MSM8909W; SD 210/212/205; SD 400; SD 410/12; SD 615/16/SD 415; SD 617; SD 650/52; SD 800; SD 808; SD 810). Affected Android versions are before the 2018-04-05 se...

CVE-2015-9182

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2016-10424

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, SD 820A, SD 835, S...

CVE-2015-9158

The CVE-2015-9158 issue involves a buffer overflow in a QTEE crypto function on Android devices using Qualcomm Snapdragon platforms (e.g., Snapdragon Automobile, Mobile, Wear and various SD/SoC families). Root cause: a vulnerability in the QTEE crypto function that can overflow a buffer, potentia...

CVE-2016-10456

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD...

CVE-2015-9198

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...