CVE-2015-9167

CVE-2015-9167 affects Qualcomm Snapdragon platforms (Automobile and Mobile) across SD 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, and 820A. Description: an integer underflow in an EMM command can occur. The issue is documented in multiple sources (NVD, CVE lists)...

CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9122

CVE-2015-9122 describes a possible buffer overflow in Android on Qualcomm Snapdragon/mobile SoCs when a SIM response exceeds 64 KB for a stream APDU command. Affected products include a wide range of Qualcomm/Snapdragon modems and Android devices, with the issue stemming from handling large APDU ...

CVE-2015-9130

CVE-2015-9130 describes a NULL pointer dereference in a PlayReady function on Android running on Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MSM8909W; SD 210/212/205; 400; 410/12; 615/16/SD 415; 617; 650/52; 808; 810) prior to the 2018-04-05 security patch level. The issue is exploitabl...

CVE-2015-9133

CVE-2015-9133 affects Android devices with Qualcomm Snapdragon Mobile chips (SD 400/410/12, SD 617, SD 650/52, SD 800, SD 810). When Widevine App TZ_WV_CMD_DECRYPT_VIDEO is called with a size that is too large, an integer overflow may occur in the affected components. The vulnerability is describ...

CVE-2015-9169

CVE-2015-9169 describes a buffer over-read in the QSEE app on Android devices with Qualcomm Snapdragon Mobil/Wear platforms (various SD generations listed). The issue could lead to leakage of confidential information. The entry is publicly cataloged in NVD and CVE records, and is addressed by And...

CVE-2015-9182

Technical details about CVE-2015-9182 (affected Qualcomm Android components, exact versions, exploit conditions) are not publicly provided in the connected documents. Monitor for updates from NVD/Android bulletins for concrete impact and remediation.

CVE-2015-9142

CVE-2015-9142 describes a bounds-check omission for a vtable index in the DAL-TO-QDI conversion framework affecting multiple Qualcomm/Snapdragon mobile platforms (Android before 2018-04-05 SPL or earlier patch level). Affected products include a broad set of Snapdragon/SDM devices listed in the d...

CVE-2015-9143

CVE-2015-9143 affects Android devices with Qualcomm Snapdragon platforms (including IPQ4019, MDM9xxx, MSM89x, SD family) prior to the 2018-04-05 security patch level. The issue is a buffer overflow that occurs when reading CDT from eMMC with a very large meta offset exceeding the default CDT-arra...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...

CVE-2015-9150

Technical details for CVE-2015-9150 are not publicly available in the provided documents. The sources confirm the vulnerability description but lack specifics on affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2014-9998

CVE-2014-9998 describes a buffer overflow vulnerability in Android devices on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) across numerous IPQ and SD/SDX catalog components. The issue occurs while processing firmware image signatures; when the firmware signature size is large, the int...

CVE-2014-9996

CVE-2014-9996 affects Android devices with Qualcomm Snapdragon Mobile SD 400 and SD 800 preceding the 2018-04-05 patch level. The issue is a buffer overflow during provisioning verification, described across sources (including CNVD-2018-08828) as potentially enabling arbitrary code execution or D...

CVE-2014-9988

CVE-2014-9988 affects Android on Qualcomm Snapdragon devices (Automotive, Mobile, Wear, and listed SD families). Root cause: lack of input validation for message length leads to a buffer over-read in drm_app_encapsulate_save_keys. Impact: critical risk across confidentiality, integrity, and avail...

CVE-2016-10440

CVE-2016-10440 describes an Android/Qualcomm bus-access control flaw: improper access control to a bus on Snapdragon Mobile SD 425, 430, 450, 625, 650/52. The root cause is a bus access control weakness that could allow a network-adjacent attacker to compromise confidentiality, integrity, and ava...

CVE-2016-10442

Technical details for CVE-2016-10442 are not publicly provided in the supplied documents; the entry lists affected Android/Qualcomm components but no exploits or patches are detailed here. Monitor for updates.

CVE-2016-10444

CVE-2016-10444 affects Android devices using Qualcomm Snapdragon components (Automotive, Mobile, Wear) with chips listed (SD 210/212/205, 425, 430, 450, 625, 820, 820A, 835, etc.). The root cause is a changed SMMU Access Control Policy that blocks the HLOS from accessing BLSP and BAM resources. P...

CVE-2016-10432

CVE-2016-10432 affects Android devices with Qualcomm Snapdragon Automotive and Snapdragon Mobile platforms (SD 410/12, 425, 430, 450, 617, 625, 650/52, 820, 820A). The issue is a TOCTOU vulnerability during sanitization of userspace values passed to the tQSEE system call, potentially enabling pos...

CVE-2016-10457

CVE-2016-10457 affects Android on Qualcomm Snapdragon-based devices (multiple SoCs listed) where an app requests more permissions than required. The issue is described as a permission overreach with a high-impact risk profile (CVSS v3: 9.8, Network, No user interaction) and is documented for Andr...

CVE-2016-10489

CVE-2016-10489 affects Android devices with Qualcomm Snapdragon Mobile (SD 400) on affected patch levels prior to 2018-04-05. The vulnerability arises from lack of address argument validation in qsee_get_tz_app_name(), which can lead to an untrusted pointer dereference. The Android Bulletin for 2...