CVE-2014-10055

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, there could be leakage of protected contents if HLOS doesn't request for security restoration for OCMEM xPU's...

CVE-2014-10054

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...

CVE-2014-10043

CVE-2014-10043 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, SD 400/410/12/800). The issue is a buffer over-read when reading PlayReady rights string information from a command buffer (sent from non-secure side) if the rights string length...

CVE-2014-10039

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800, calling qseeappentryreturn without first calling qseeappentry will cause the stack to be restored to an older state resulting in a return to an unexpected location...

CVE-2014-10039

CVE-2014-10039 affects Android on Qualcomm-based devices (Qualcomm MDM9625, SD 400, SD 800) where qsee_app_entry_return() is called without a preceding qsee_app_entry(). This can cause the stack to be restored to an older state and return to an unexpected location, with CRITICAL impact (CVSSv3: A...

CVE-2014-10047

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur...

CVE-2014-10046

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the...

CVE-2014-10044

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound...

CVE-2014-10063

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device...

CVE-2014-10063

CVE-2014-10063 affects Qualcomm-based Android devices (Qualcomm Snapdragon Mobile MDM9625 and SD 800). The fuse at secure boot was not blown correctly, per Android bulletin context. Impact is defined as a fault in the secure-fuse state; the issue is mitigated by the 2018-04-05 security patch leve...

CVE-2014-10062

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810...

CVE-2014-10059

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge...

CVE-2014-10057

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and SnapdragonHighMed2016, binary Calibration files under data/misc/audio have 777...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

CVE-2016-10412

CVE-2016-10412 describes an integer overflow that could lead to a buffer overflow in a memory API function on Android devices with Qualcomm Small Cell SoCs, Snapdragon Mobile, and Snapdragon Wear families. The affected range includes numerous Snapdragon/SD and related components, with the issue a...

CVE-2015-9202

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2014-10046

CVE-2014-10046 is an Android/Qualcomm PDN throttle use-after-free issue in which the PDN throttle info block is freed without clearing the active timer on affected Qualcomm Snapdragon platforms (MDM9615/9625/9635M and SD 210/212/205, 400, 410/12, 615/16/ SD 415, 800, 808, 810). The vulnerability ...

CVE-2016-10449

CVE-2016-10449 affects Android on Qualcomm Snapdragon devices (GNSS API) where, prior to the 2018-04-05 patch level, a NULL pointer dereference in GNSS API functions could occur. The issue is associated with Snapdragon Mobile and Wear platforms (e.g., MDM9206/9607/9640/9650, MSM8909W, SD 210–835 ...

CVE-2015-9187

CVE-2015-9187 affects Android devices with Qualcomm Snapdragon SoCs (e.g., Snapdragon Automobile, Mobile, Wear lines) prior to the 2018-04-05 patch level. The issue is a lack of buffer length validation in the pvr_cmd_handler, which can lead to unauthorized access to secure memory. The NVD/Androi...

CVE-2016-10469

CVE-2016-10469: In Android (pre-2018-04-05 SPL) on Qualcomm Snapdragon platforms, RSA padding functions in CORE were incorrectly implemented, enabling information exposure. Affected: Android devices with Qualcomm Snapdragon Automotive/mobile/wear SoCs listed; impact described as High for confiden...