Null pointer dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, untrusted pointer dereference in QSEE Syscall without proper validation can lead to access of...

Null pointer dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation inqseefusewrite could lead to untrusted pointer dereference...

Null pointer dereference

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation in qseequerycounter syscall could lead to untrusted pointer dereference...

CVE-2015-9191

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 617, SD 650/52, SD 808, SD 810, and SDX20, in a QTEE syscall handler...

CVE-2015-9114

Summary: CVE-2015-9114 affects Android devices with Qualcomm Snapdragon components, where the qsee_query_counter syscall may dereference an untrusted pointer due to missing address argument validation. This could allow a local/user-privilege attacker to trigger arbitrary behavior in certain Qualc...

CVE-2015-9134

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qseemaccgeneccprivkey', untrusted pointer dereference occurs, which could result in arbitrary write...

CVE-2015-9132

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, and SD 810, possible arbitrary memory read due to untrusted pointer dereference when handling HLOS controlled...

CVE-2015-9111

CVE-2015-9111 affects Android on Qualcomm Snapdragon devices (SD 425/430/450/625/650/52/820/820A) where a QTEE syscall handler could dereference an untrusted pointer. This could enable remote code execution with network access and no user interaction. The vulnerability is documented as affecting ...

CVE-2015-9134

CVE-2015-9134 affects Android devices with Qualcomm Snapdragon Mobile (SD 410/12, SD 615/16/SD 415, SD 810). The issue arises while processing QSEE Syscall qsee_macc_gen_ecc_privkey, where an untrusted pointer dereference can lead to arbitrary writes. Publicly available Android bulletin entries p...

CVE-2016-10487

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810,...

CVE-2015-9149

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD...

CVE-2016-10487

CVE-2016-10487 is documented in Android bulletin context as a vulnerability in Qualcomm QuRT API where an untrusted pointer can be dereferenced. Affected platforms include Android devices using Qualcomm Snapdragon Automotive, Mobile, and Wear platforms (e.g., MDM9206/9607/9635M/9640/9645/9650/965...

CVE-2015-9149

CVE-2015-9149 affects Android devices with Qualcomm Snapdragon chipsets (Automotive/Mobile/Wear families). In a DIAG ioctl handler , an untrusted pointer dereference could occur, enabling high-severity impact per CVSS (network, 3.0: 9.8). Provider details show a critical, remote-executable risk, ...

CVE-2015-9135

This CVE (CVE-2015-9135) affects Android devices with Qualcomm Snapdragon/mobile SoCs (e.g., MDM9625/63/64x series, MSM8909W, SD 210/212/205, 400/410/12, 615/16/415, 617, 650/52, 800, 808, 810) where a QTEE syscall handler may dereference an untrusted pointer. The root cause is an untrusted point...

CVE-2015-9175

CVE-2015-9175 involves an untrusted pointer dereference in wv_dash_core_generic_verify() caused by insufficient input validation on a wide range of Qualcomm/Android components (Android devices with Snapdragon Automotive/Mobile/Wear). Public details confirm the affected families (e.g., various Sna...

CVE-2015-9113

CVE-2015-9113 affects Android on Qualcomm Snapdragon platforms (Automotive and MDM9625-based devices; SD 425/430/450/625/650/52/810/820/820A). The root cause is an untrusted pointer dereference in the QSEE Syscall without proper validation, enabling access to blacklisted memory. The NVD entry lis...

CVE-2015-9116

CVE-2015-9116 describes a pointer dereference flaw in a QTEE syscall handler on Android devices using Qualcomm Snapdragon Automotive and Snapdragon Mobile (SD 425/430/450/625/650/52/810/820/820A, and related chips). The untrusted pointer dereference occurs in the QTEE syscall path and affects And...

CVE-2016-10489

CVE-2016-10489 affects Android devices with Qualcomm Snapdragon Mobile (SD 400) on affected patch levels prior to 2018-04-05. The vulnerability arises from lack of address argument validation in qsee_get_tz_app_name(), which can lead to an untrusted pointer dereference. The Android Bulletin for 2...

CVE-2017-17770

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur...

Null pointer dereference

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, untrusted pointer dereference in aprcbfunc can lead to an arbitrary code execution...