CVE-2017-14913

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated...

CVE-2017-14913

CVE-2017-14913 concerns a Qualcomm-closed source component vulnerability in Android prior to the 2018-01-05 patch level. The issue involves DDR address input validation that is allegedly truncated, potentially enabling remote impact over the network with no user interaction. The CVE is listed und...

CVE-2017-14911

CVE-2017-14911 describes a critical elevation/remote-privilege issue in Qualcomm components where the XBL loader could skip authentication of device config on several Snapdragon platforms (IoT, Mobile, Auto, and various SD/SoCs). Public records identify the affected elements as Qualcomm closed‑so...

CVE-2017-11010

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, access control left a configuration space unprotected...

CVE-2017-11010

CVE-2017-11010 affects Qualcomm closed-source components in Android (devices using Snapdragon IoT and listed SD/mobiles). Description from the CVE: leaving a configuration space unprotected due to faulty access control. Impact as per CVSS: Critical/HIGH on confidentiality, integrity, and availabi...

CVE-2017-14906

CVE-2017-14906 affects Android on Qualcomm Snapdragon IoT devices (including Snapdragon Mobile MDM9206/MDM9607/MSM8909W, SD 210/212/205, SD 410/12) where PKCS7 padding is not supported by the crypto storage APIs. According to NVD, the issue is rated CVSS v3.0/9.8 (CRITICAL) with network attack ve...

CVE-2017-14912

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile VERSION: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 835, the attributes of buffers in Secure Display were n...

CVE-2017-14912

CVE-2017-14912 describes an issue on Android before 2018-01-05 running on Qualcomm Snapdragon IoT and Snapdragon Mobile (devices listed: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200/210/212/205, SD 400/410/12, SD 425, 430, 615/16/SD 415, 617, 625, 650/52, 800, 835). The vulnerability stems from th...

CVE-2017-14915

In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition...

CVE-2017-14915

CVE-2017-14915 describes a critical vulnerability in Android prior to 2018-01-05 affecting Qualcomm Snapdragon Mobile (SD 625, 650/52, 835). The issue arises when accessing SPCOM functions with a compromised client structure, leading to a Use-After-Free condition. The documented CVSSv3 base score...

Buffer overflow

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

CVE-2017-17773

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

CVE-2017-17773

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

CVE-2017-17773

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

CVE-2017-17773

CVE-2017-17773 affects Qualcomm closed‑source components used in Snapdragon Automotive/Wearable and various Snapdragon mobile platforms (e.g., MDM9206/9607/9650 and many SD/MSM variants). The vulnerability stems from improper input validation in the function video_fmt_mp4r_process_atom_avc1(), wh...

CVE-2017-17773

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in...

Input validation

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file...

CVE-2017-14910

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file...

CVE-2017-14910

The vulnerability CVE-2017-14910 affects Qualcomm/Qualcomm-derived Snapdragon platforms used in Snapdragon Automobile, Snapdragon IoT, and Snapdragon Mobile (MDM9206/9607/9650, S820A/S820Am, SD 210/212/205, 410/12, 425, 430, 615/16/415, 617, 625, 650/52, 820, 835, 845). The issue is a buffer over...

CVE-2017-14910

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file...