CVE-2015-9160

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 80...

CVE-2016-10476

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835,...

CVE-2014-9994

CVE-2014-9994 affects Android on Qualcomm Snapdragon Mobile (SD 400/SD 800) prior to the 2018-04-05 patch level. The root cause is lack of input validation that can trigger an integer overflow, subsequently leading to a buffer overflow. The vulnerability is described as potentially critical (CVSS...

CVE-2016-10459

CVE-2016-10459 describes a memory exhaustion issue in Android devices during calls on Qualcomm Snapdragon platforms (various MDM and SD families). The vulnerability affects Android builds before the 2018-04-05 patch level (and older patch levels). Root cause is memory exhaustion during call handl...

CVE-2015-9130

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, in a PlayReady function, a NULL pointer dereference can occur...

CVE-2015-9203

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2015-9188

The CVE-2015-9188 issue concerns Qualcomm/Android devices where, before the 2018-04-05 patch level, the Secure DEMUX command handler may write an error code into a response buffer without validating the buffer length, risking memory corruption. Affected products include various Snapdragon Automot...

CVE-2015-9201

CVE-2015-9201 describes an integer overflow in tzbsp that can lead to privilege escalation on multiple Qualcomm Snapdragon/Android platforms (Automotive, Mobile, Wear, and related SoCs). The affected components and devices span Qualcomm’s tzbsp-related code paths used in Snapdragon lines (e.g., I...

CVE-2015-9208

CVE-2015-9208 affects Android on Qualcomm Snapdragon devices (various SoCs listed). The vulnerability arises because tzbsp_pil_verify_sig() does not strictly constrain the ELF/program headers and hash segment pointers to secure memory; it only ensures addresses are not in non-secure memory, allow...

CVE-2015-9165

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, incorrect error handling could lead to a double fre...

CVE-2016-10491

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...

CVE-2016-10486

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 820A, PD failure reason string from user PD is used directly in root PD, s...

CVE-2016-10472

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...

CVE-2014-9995

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, in drmprovcmdverifykey, the variable featurenamelength is not validated. There is a check for featurenamelen + filePathLen but there might be an integer wrap when checking featurenamelen ...

CVE-2015-9119

Technical details about CVE-2015-9119 are not publicly provided in the connected documents. Affected products, exploitation, and fixes are not specified here. Monitor for updates from the sources in the Initial document (Android bulletin, NVD) for remediation.

CVE-2015-9211

CVE-2015-9211 describes a buffer overread in the PlayReady module affecting Android devices with Qualcomm Snapdragon ranges (Automobile, Mobile, Wear) prior to the 2018-04-05 patch level. The issue occurs when a large PlayReady message is processed, potentially impacting confidentiality, integrit...

CVE-2015-9113

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, untrusted pointer dereference in QSEE Syscall without proper validation can lead to access of...

CVE-2016-10434

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function is a buffer from HLOS that needs to be authenticated using HMAC and then processed. However, some of the processing...

CVE-2014-10058

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and SnapdragonHighMed2016, unauthorized users can potentially modify system time...

CVE-2014-10048

CVE-2014-10048 affects Android on Qualcomm Snapdragon mobile/wear platforms (numerous SKUs) prior to the 2018-04-05 security patch level. The issue arises in time-services when setting offsets, where bases can be configured to values greater than the valid base, causing an array index out-of-boun...