CVE-2014-10056

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, A buffer overflow can potentially occur in any OpenCL application that calls clBuildProgram with a device of type CLDEVICETYPECPU in its devicelist argument...

CVE-2016-10472

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820,...

CVE-2016-10420

CVE-2016-10420 affects Android devices with Qualcomm Snapdragon/mobile platforms listed (e.g., MDM9206/9607/9650 and SD family up to SDX20). The issue arises while playing a .flv clip that lacks an inbuilt seek table, where a dynamic index table access goes out of bounds, causing a crash (availab...

CVE-2015-9114

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation in qseequerycounter syscall could lead to untrusted pointer dereference...

CVE-2015-9211

CVE-2015-9211 describes a buffer overread in the PlayReady module affecting Android devices with Qualcomm Snapdragon ranges (Automobile, Mobile, Wear) prior to the 2018-04-05 patch level. The issue occurs when a large PlayReady message is processed, potentially impacting confidentiality, integrit...

CVE-2014-10058

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and SnapdragonHighMed2016, unauthorized users can potentially modify system time...

CVE-2014-10048

CVE-2014-10048 affects Android on Qualcomm Snapdragon mobile/wear platforms (numerous SKUs) prior to the 2018-04-05 security patch level. The issue arises in time-services when setting offsets, where bases can be configured to values greater than the valid base, causing an array index out-of-boun...

CVE-2015-9204

CVE-2015-9204 describes a buffer overread in Android on Qualcomm Snapdragon mobile/wear platforms (various SD series) when cchFriendlyName exceeds TZ_PR_MAX_NAME_LEN in playready_leavedomain_generate_challenge(). The issue is triggered in affected Android versions prior to the 2018-04-05 security...

CVE-2015-9165

CVE-2015-9165 affects Android devices with Qualcomm Snapdragon/related SoCs (IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 400/410/12/615/16/ SD 415/617/650/52/ SD 808/810) where a flaw in the QTEE file service API allows a double-free due to incorrect error handling. The vulnerability ...

CVE-2015-9120

CVE-2015-9120 affects Android devices on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) prior to the 2018-04-05 patch level, where the Core detects an Error Condition Without Action. The issue is tied to multiple Snapdragon SoCs (e.g., IPQ4019, SD 210/212/205, 400/410/12, 425, 430, 450,...

CVE-2015-9124

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, the device may crash while accessing an invalid pointer or expose otherwise...

CVE-2015-9185

Technical details such as affected products, component, root cause, impact, and fixes are not publicly provided in the supplied documents; monitor for updates.

CVE-2015-9114

Summary: CVE-2015-9114 affects Android devices with Qualcomm Snapdragon components, where the qsee_query_counter syscall may dereference an untrusted pointer due to missing address argument validation. This could allow a local/user-privilege attacker to trigger arbitrary behavior in certain Qualc...

CVE-2016-10424

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, SD 820A, SD 835, S...

CVE-2015-9140

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD...

CVE-2016-10414

CVE-2016-10414 affects Android devices using Qualcomm Small Cell SoCs (and related Snapdragon/SD variants) where passing a hash with zero datalength causes the code to return an error, even though zero length is valid. Connected sources confirm the issue and map it to a broad set of Qualcomm/Andr...

CVE-2016-10416

CVE-2016-10416 affects Android devices prior to the 2018-04-05 security patch level (and earlier patches) on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms. The issue causes a UE crash due to IPCMem exhaustion when UDP data is pumped to the UE’s ULP UDP port 7275. The vulnerability impa...

CVE-2015-9111

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, in a QTEE syscall handler, an untrusted pointer dereference can occur...

CVE-2014-10044

CVE-2014-10044 affects Android on Qualcomm Snapdragon devices, where in the time daemon an unauthorized user could modify the system time and cause an array index to go out of bounds. Affected platforms include Snapdragon MDM9615/9625/9635M and SD series 210/212/205, 400, 617, 800, and 820, with ...

CVE-2015-9111

CVE-2015-9111 affects Android on Qualcomm Snapdragon devices (SD 425/430/450/625/650/52/820/820A) where a QTEE syscall handler could dereference an untrusted pointer. This could enable remote code execution with network access and no user interaction. The vulnerability is documented as affecting ...