CVE-2016-10490

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD...

CVE-2015-9135

This CVE (CVE-2015-9135) affects Android devices with Qualcomm Snapdragon/mobile SoCs (e.g., MDM9625/63/64x series, MSM8909W, SD 210/212/205, 400/410/12, 615/16/415, 617, 650/52, 800, 808, 810) where a QTEE syscall handler may dereference an untrusted pointer. The root cause is an untrusted point...

CVE-2016-10481

CVE-2016-10481 affects Qualcomm WLAN firmware in Android devices; when WLAN FW receives the WMI_STA_SMPS_PARAM_CMDID ioctl in a not-associated state and the virtual channel handle is unassigned, the code does not null-check the handle, causing an assert. The entry is mapped to a high-severity, ne...

CVE-2015-9195

CVE-2015-9195 affects Android (pre-2018-04-05 patch level) on Qualcomm Snapdragon platforms (MDM9625/9635M/9650/9655; SD 400/410–12/615/16/415/617/650/52/808/810; SDX20) where a QTEE syscall handler can trigger a buffer overflow in the High-Level OS (HLOS). The issue is rooted in the QTEE syscall...

CVE-2015-9146

CVE-2015-9146 affects Android devices with Qualcomm Snapdragon SoCs (SD 400/800/835/845/850, SDX20 and related MDM variants) where QDI read, write, or ioctl operations may pass an unvalidated pointer, enabling access during a delayed response. The issue is described as a pointer validation bug in...

CVE-2015-9159

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, ...

CVE-2015-9192

CVE-2015-9192 affects Android devices with Qualcomm Snapdragon components (Automobile, Mobile, Wear; various SD/MDM variants). The issue is an out-of-bounds memory access in the content protection manager caused by improper validation of incoming messages. This is described in the Android 2018-04...

CVE-2016-10446

CVE-2016-10446 describes an issue where incorrect OCIMEM MPU configuration in Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) could allow non-secure software to access OCIMEM memory used by TrustZone (TZ). Affected components include OCIMEM on various Snapdragon platforms (e.g., SD 210/2...

CVE-2016-10438

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2015-9221

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference...

CVE-2015-9115

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, and SD 820A, no address argument validation is performed on calls to the...

CVE-2016-10423

Mode C: CVE-2016-10423 describes a vulnerability in Android where, on Qualcomm Snapdragon Automotive and Mobile platforms (SD 425/430/450/625/650/52/820/820A), a Trusted Application that has opened the SPI bus to a device can be read by another Trusted Application due to non-exclusive access. The...

CVE-2014-10045

Technical details about CVE-2014-10045 are not publicly provided in the supplied documents. Monitor for updates and additional disclosures in connected sources as they become available.

CVE-2015-9217

CVE-2015-9217 involves malformed HVEC clips that can trigger an assertion failure in Android devices on Qualcomm Snapdragon platforms (numerous models) prior to the 2018-04-05 security patch level. The issue is described in the CVE entry with a Local attack vector and impacts to confidentiality, ...

CVE-2016-10443

CVE-2016-10443 affects Android devices with Qualcomm Snapdragon Automotive, Mobile, and Wear platforms (e.g., MDM9xxx, SD 210/212/205 to SD 850 families). The issue, described as possible packet replay, is tied to affected Qualcomm/Snapdragon components and is fixed by Android patch levels of 201...

CVE-2016-10452

CVE-2016-10452 affectsAndroid environments on Qualcomm Snapdragon Automotive and Snapdragon Mobile (SD 410/12, 425, 430, 450, 615/16/415, 617, 625, 650/52, 808, 810, 820, 820A, 835). Root cause: memory protection assertion occurs after out-of-order termination of a trusted application (TA). Impac...

CVE-2016-10441

CVE-2016-10441: In Android on Qualcomm Snapdragon platforms (various SD/MDM and X series) before the 2018-04-05 patch level, improper offset validation in the video parser can cause a buffer overflow. CVSS indicates high to critical impact across confidentiality, integrity, and availability; expl...

CVE-2015-9149

CVE-2015-9149 affects Android devices with Qualcomm Snapdragon chipsets (Automotive/Mobile/Wear families). In a DIAG ioctl handler , an untrusted pointer dereference could occur, enabling high-severity impact per CVSS (network, 3.0: 9.8). Provider details show a critical, remote-executable risk, ...

CVE-2015-9129

CVE-2015-9129 affects Android devices using Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) where the TZ_PR_CMD_CONTENT_SET_PROP size parameter can cause an integer underflow when small. The issue’s impact is described as high to critical in CVSS terms, with potential remote/privilege im...

CVE-2015-9120

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800,...