CVE-2016-10427

CVE-2016-10427 affects Qualcomm Snapdragon/RLC AM module in Android devices, causing denial of service via improper boundary check and triggering an assertion. Public details indicate impact on multiple Snapdragon generations (e.g., MDM92xx, MSM89xx, SD 210–SDX20) with exploitation requiring no u...

CVE-2016-10467

Technical details about CVE-2016-10467 are not publicly available in the provided connected documents. Please monitor for updates from official advisories.

CVE-2016-10441

CVE-2016-10441: In Android on Qualcomm Snapdragon platforms (various SD/MDM and X series) before the 2018-04-05 patch level, improper offset validation in the video parser can cause a buffer overflow. CVSS indicates high to critical impact across confidentiality, integrity, and availability; expl...

CVE-2016-10487

CVE-2016-10487 is documented in Android bulletin context as a vulnerability in Qualcomm QuRT API where an untrusted pointer can be dereferenced. Affected platforms include Android devices using Qualcomm Snapdragon Automotive, Mobile, and Wear platforms (e.g., MDM9206/9607/9635M/9640/9645/9650/965...

CVE-2016-10491

CVE-2016-10491 is an Android vulnerability affecting devices with Qualcomm Snapdragon Mobile and related SoCs. The issue arises from an integer overflow that can overflow a buffer in a QuRT API function, potentially enabling further impact on affected devices. Public references describe impact ac...

CVE-2016-10481

CVE-2016-10481 affects Qualcomm WLAN firmware in Android devices; when WLAN FW receives the WMI_STA_SMPS_PARAM_CMDID ioctl in a not-associated state and the virtual channel handle is unassigned, the code does not null-check the handle, causing an assert. The entry is mapped to a high-severity, ne...

CVE-2016-10480

CVE-2016-10480: Android Qualcomm-exif memory corruption due to invalid integer overflow checks in exif parsing, affecting numerous Snapdragon/mobile/wear platforms prior to 2018-04 patch levels. Impact described as memory corruption with high/critical severity in CVSS assessments. Patches exist i...

CVE-2015-9149

CVE-2015-9149 affects Android devices with Qualcomm Snapdragon chipsets (Automotive/Mobile/Wear families). In a DIAG ioctl handler , an untrusted pointer dereference could occur, enabling high-severity impact per CVSS (network, 3.0: 9.8). Provider details show a critical, remote-executable risk, ...

CVE-2015-9137

CVE-2015-9137 describes a vulnerability in Android where, on Qualcomm Snapdragon platforms (various models listed), several EFS2 DIAG command handlers fail to call fs_diag_access_check(), due to an insufficient access-control check in the DIAG path. The issue is triggered on Android devices using...

CVE-2015-9139

CVE-2015-9139 describes an input-validation issue during SSL handshake negotiation on Android devices with Qualcomm Snapdragon chipsets (various models) prior to the April 5, 2018 patch level. The vulnerability path is not elaborated beyond “improper input validation” during SSL negotiation, and ...

CVE-2015-9146

CVE-2015-9146 affects Android devices with Qualcomm Snapdragon SoCs (SD 400/800/835/845/850, SDX20 and related MDM variants) where QDI read, write, or ioctl operations may pass an unvalidated pointer, enabling access during a delayed response. The issue is described as a pointer validation bug in...

CVE-2015-9218

CVE-2015-9218 describes a hang in Android devices when processing certain HEVC clips, occurring on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 625, 650/52, 800, 808, 810, 820, 835, 845, SDM630/636/660, Snapdragon_High_Med_2016) ...

CVE-2015-9221

CVE-2015-9221 pertains to Android up to early 2018 patches, where Qualcomm Snapdragon mobile platforms (SD 400/800/810) were vulnerable due to lack of validation of pointers passed by secure apps, enabling an untrusted pointer dereference. The issue affects Android components relying on secure ap...

CVE-2015-9108

The CVE-2015-9108 entry relates to Android devices with Qualcomm QSEE components. The vulnerability is triggered in scenarios where there is insufficient address-argument validation when calling a QSEE syscall, potentially allowing an attacker to perform arbitrary read/write operations or trigger...

CVE-2015-9171

CVE-2015-9171 describes a buffer over-read in OEMCrypto_Dash_InstallEncapKeybox() when keyBoxLength exceeds TZ_WV_MAX_DATA_LEN (20k) on various Qualcomm/Android components. Affected: Android devices with Qualcomm Snapdragon Automotive/Mobile/Wear stack listed in the description (multiple SoCs). R...

CVE-2015-9172

The CVE-2015-9172 issue affects Android platforms with WideVine API on Qualcomm Snapdragon families (Automotive, Mobile, Wear) including devices using SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835, 845, 850. In a WideVine API function, a bu...

CVE-2015-9181

CVE-2015-9181 is a buffer over-read in a crypto API function affecting multiple Qualcomm Snapdragon platforms (Automobile, Mobile, Wear; SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835). Root cause is a memory over-read in the crypto API ...

CVE-2015-9156

CVE-2015-9156 covers a buffer overflow in Android when performing a high-speed Dual Carrier Downlink Data call in multicell environments on Qualcomm Snapdragon Mobile and Snapdragon Wear chipsets (MDM9206/9607/9635M/ MSM8909W/ SD 210/212/205/400/410/12/425/430/615/16/415/617/800/808/810; listed S...

CVE-2015-9162

CVE-2015-9162 – Mode C summary : The issue affects Android devices with Qualcomm QSEE “Certificate_CreateWithBuffer” handling. When memory allocation fails, the code frees the memory but returns the original pointer without setting it to NULL, creating a potential use-after-free scenario in TQS. ...

CVE-2015-9127

CVE-2015-9127 affects Android devices with Qualcomm Snapdragon platforms (e.g., MSM8909W, SD 210/212/205, 400/410/12/16, 415, 810) where a large buffer allocation in the Playready App can trigger a null pointer dereference due to memory allocation failure. This is described as a vulnerability in ...