CVE-2015-9175

CVE-2015-9175 involves an untrusted pointer dereference in wv_dash_core_generic_verify() caused by insufficient input validation on a wide range of Qualcomm/Android components (Android devices with Snapdragon Automotive/Mobile/Wear). Public details confirm the affected families (e.g., various Sna...

CVE-2016-10475

CVE-2016-10475 affects Android prior to the 2018-04-05 patch on Qualcomm Snapdragon Mobile devices (SD 210/212/205, SD 400/430, SD 615/16/ SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820). The issue is lack of input validation that may cause an integer overflow leading to a buff...

CVE-2015-9148

CVE-2015-9148 is an Android vulnerability affecting Qualcomm-based devices (Android versions affected prior to 2018-04-05 patch level) where the Diag User-PD command registration function does not validate a length value used for buffer allocation. If a very large length is processed, this can tr...

CVE-2015-9149

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD...

CVE-2015-9151

CVE-2015-9151 affects Android devices with Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800 prior to the 2018-04-05 security patch level. The issue is that userspace-provided pointer arguments are not validated, as described in the CVE entry. The NVD listing assigns a CVSSv3 base ...

CVE-2016-10406

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 835, while printing debug message of a pointer in wlanqmierrcb, the real...

CVE-2015-9159

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2014-10059

CVE-2014-10059 : In Android, prior to the 2018-04-05 security patch level, on certain Qualcomm Snapdragon platforms (MDM9615, MDM9625, SD 210/212/205, SD 400, SD 800), there is an improper access control in the ATCMD service that allows third-party components to access it without user knowledge. ...

CVE-2016-10464

CVE-2016-10464 describes a DoS vulnerability caused by lack of input validation for HCI H4 UART packet IDs in Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear (MDM9206/9607/9640/9650, QCA6174A, QCA6574AU, QCA9377, SD 210/212/205, SD 425/600/650/52, SD 808/810/820, SDX20). The i...

CVE-2015-9180

CVE-2015-9180 affects Android on a wide range of Qualcomm Snapdragon platforms (Automotive, Mobile, Wear; various SD series). The issue is that a user-space “response pointer” passed to SDMX_process is not checked before use; if the response buffer is smaller than 16 bytes, writes can overflow in...

CVE-2014-9985

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior...

CVE-2015-9110

CVE-2015-9110 is described in the connected CNVD/NVD entries as: on Android, before the 2018-04-05 security patch level, Qualcomm closed‑source components (Qualcomm Snapdragon Mobile/Automotive) did not validate the address parameter in the qsee_get_secure_state syscall. The root cause is the mis...

CVE-2016-10447

CVE-2016-10447: In Android builds prior to the 2018-04-05 patch level (and earlier patch levels), a secure UI crash can occur due to an uninitialized link list entry in the dynamic font module on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms. Affected Qualcomm/SD families include MDM92...

CVE-2016-10417

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2016-10434

CVE-2016-10434 affects Android on Qualcomm Snapdragon Automotive and Snapdragon Mobile SD 820/820A prior to a 2018-04 patch level. The issue: input to the RPMB write response function comes from HLOS and should be authenticated with HMAC before processing, but some processing occurs before HMAC v...

CVE-2016-10451

CVE-2016-10451 affects Android devices with Qualcomm-based Snapdragon Mobile and Snapdragon Wear platforms (various SDM/MDM/SD series listed in the description). The issue is privilege escalation caused by inherently insecure handling of local files, exploitable on devices prior to the 2018-04-05...

CVE-2016-10462

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, and SnapdragonHighMed2016,...

CVE-2016-10438

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2015-9190

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 808, and SD 810, if startaddr + size is too large i...

CVE-2016-10420

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, a...