CVE-2017-18292

CVE-2017-18292 affects Qualcomm Snapdragon devices (MSM8909W, MSM8996AU, SD 210/212/205, 410/12, 425, 430, 450, 615/16/SD 415, 617, 625, 650/52, 800, 810, 820, 820A) across Snapdragon Automotive, Mobile and Wear. Description: a secure application running in a non-secure space can restart TrustZon...

CVE-2018-5875

The CVE-2018-5875 entry relates to Snapdragon platforms (Automobile, Mobile, Wear). The root cause is an integer overflow during MP4 parsing that can lead to a buffer overflow in affected components. Documented impact indicates potential memory corruption with partial to high severity depending o...

CVE-2018-5882

CVE-2018-5882 affects Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. The issue arises during parsing of a Flac file with a corrupted comment block, leading to a buffer over-read in the vulnerable Qualcomm-based platforms. The public descriptions explicitly name the affected product...

CVE-2018-5891

CVE-2018-5891 affects Snapdragon Mobile and Snapdragon Wear. After IMS is registered and IMS data daemon restarts, the ipc_dataHandle is not kept in sync with the freed dataDHandle, causing a Use-After-Free in the DPL thread and memory corruption risk. The description specifies local access (loca...

CVE-2015-9119

Technical details about CVE-2015-9119 are not publicly provided in the connected documents. Affected products, exploitation, and fixes are not specified here. Monitor for updates from the sources in the Initial document (Android bulletin, NVD) for remediation.

CVE-2015-9139

CVE-2015-9139 describes an input-validation issue during SSL handshake negotiation on Android devices with Qualcomm Snapdragon chipsets (various models) prior to the April 5, 2018 patch level. The vulnerability path is not elaborated beyond “improper input validation” during SSL negotiation, and ...

CVE-2015-9180

CVE-2015-9180 affects Android on a wide range of Qualcomm Snapdragon platforms (Automotive, Mobile, Wear; various SD series). The issue is that a user-space “response pointer” passed to SDMX_process is not checked before use; if the response buffer is smaller than 16 bytes, writes can overflow in...

CVE-2016-10458

CVE-2016-10458 describes a Snapdragon/Qualcomm bootchain issue where qsee_log buffers are not properly unallocated or cleared before Linux boots. The root cause is improper handling of qsee_log in the bootchain, which could lead to Linux memory corruption. The mitigation described across sources ...

CVE-2015-9129

CVE-2015-9129 affects Android devices using Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) where the TZ_PR_CMD_CONTENT_SET_PROP size parameter can cause an integer underflow when small. The issue’s impact is described as high to critical in CVSS terms, with potential remote/privilege im...

CVE-2015-9143

CVE-2015-9143 affects Android devices with Qualcomm Snapdragon platforms (including IPQ4019, MDM9xxx, MSM89x, SD family) prior to the 2018-04-05 security patch level. The issue is a buffer overflow that occurs when reading CDT from eMMC with a very large meta offset exceeding the default CDT-arra...

CVE-2015-9156

CVE-2015-9156 covers a buffer overflow in Android when performing a high-speed Dual Carrier Downlink Data call in multicell environments on Qualcomm Snapdragon Mobile and Snapdragon Wear chipsets (MDM9206/9607/9635M/ MSM8909W/ SD 210/212/205/400/410/12/425/430/615/16/415/617/800/808/810; listed S...

CVE-2015-9184

CVE-2015-9184 describes a buffer overflow in the Qualcomm WV dash core: lack of length checking in wv_dash_core_load_keys_v8() affects Android devices on Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear MSM8909W, plus multiple SD platforms (e.g., 210/212/205, 400, 410/12, 425, 430, 4...

CVE-2016-10447

CVE-2016-10447: In Android builds prior to the 2018-04-05 patch level (and earlier patch levels), a secure UI crash can occur due to an uninitialized link list entry in the dynamic font module on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms. Affected Qualcomm/SD families include MDM92...

CVE-2016-10459

CVE-2016-10459 describes a memory exhaustion issue in Android devices during calls on Qualcomm Snapdragon platforms (various MDM and SD families). The vulnerability affects Android builds before the 2018-04-05 patch level (and older patch levels). Root cause is memory exhaustion during call handl...

CVE-2016-10482

CVE-2016-10482 affects Android devices on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms prior to 2018-04-05 (or earlier patch levels). The issue occurs while processing downlink information, where an assert can be reached. Affected families include MDM9206/9607/9625/9635M/9640/9645/965...

CVE-2018-11305

CVE-2018-11305 describes a Use-After-Free condition in Qualcomm Snapdragon modems triggered by a sequence of FDAL messages. Affected products include Snapdragon Automotive, Mobile, and Wear platforms across the listed chipsets: MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU and multiple ...

CVE-2018-5894

CVE-2018-5894 describes an out-of-bounds access caused by improper validation of an array index when parsing an mp4 in Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. The vulnerability affects multimedia parsing code, with exploitation possible via a crafted file over a network; ho...

CVE-2015-9118

CVE-2015-9118 affects Android systems with Qualcomm ADSP QDI Root-PD driver in Snapdragon SoCs (e.g., MDM9615/9625/9635M; SD 400/410/12/615/16/SD 415/800/808/810). The vulnerability arises from untrusted arguments from User PD that may cause integer overflow, leading to a buffer overflow. This is...

CVE-2016-10421

CVE-2016-10421 is tied to Android devices using Qualcomm AMSS/closed‑source components. The root cause is improper clearing of key material. The CVE is listed in the 2014–2016 Qualcomm cumulative update, with a High severity rating in that context. Public Android bulletin coverage for this issue ...

CVE-2016-10485

CVE-2016-10485 is a buffer overflow vulnerability described as due to lack of proper bounds checking in Android on Qualcomm Snapdragon/mobile components (lists include IPQ4019, MDM9xxx, MSM8xxx, SD 210/212/205, SD 400/410/12, SD 615/16/415, SD 617, SD 650/52, SD 800, SD 808, SD 810, SDX20). The w...

CVE-2017-15841

CVE-2017-15841 affects Snapdragon Mobile on multiple SoCs (SD 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 820, 835, Snapdragon_High_Med_2016). The issue occurs when HOST sends a Special command ID packet, causing the Controller to trigger a RAM dump and a FW reset. Documented imp...

CVE-2015-9158

The CVE-2015-9158 issue involves a buffer overflow in a QTEE crypto function on Android devices using Qualcomm Snapdragon platforms (e.g., Snapdragon Automobile, Mobile, Wear and various SD/SoC families). Root cause: a vulnerability in the QTEE crypto function that can overflow a buffer, potentia...

CVE-2015-9202

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-10483

CVE-2016-10483 affects Android devices with Qualcomm Snapdragon Mobile SoCs (SD 410/12, SD 615/16, SD 415, SD 808, SD 810). Root cause is improper input validation while processing SCM Command, leading to unauthorized memory access. According to the Android bulletin, these issues were addressed w...

CVE-2016-10497

CVE-2016-10497 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800/808/810/820/8...

CVE-2018-3590

Technical details for CVE-2018-3590 are not publicly provided in the supplied documents. Monitor for updates; no concrete details (affected components, exploit info, or remediation) are included here.

CVE-2015-9210

CVE-2015-9210 affects Android devices using Qualcomm Snapdragon components (including Snapdragon Automobile, Mobile, Wear, and various SD variants listed). The issue is a lack of input validation in playready_licacq_process_response(), which can lead to memory over-read. The cited CVSS v3.0 metri...

CVE-2015-9197

Mode C: CVE-2015-9197 affects various Qualcomm Snapdragon/mobile SoCs (e.g., MDM9xxx, SD 210–618 families) when enabling XPUs for SMEM partitions. If XPUs configuration values are out of range, memory access outside SMEM can occur and set incorrect XPU configurations, potentially enabling remote ...

CVE-2016-10480

CVE-2016-10480: Android Qualcomm-exif memory corruption due to invalid integer overflow checks in exif parsing, affecting numerous Snapdragon/mobile/wear platforms prior to 2018-04 patch levels. Impact described as memory corruption with high/critical severity in CVSS assessments. Patches exist i...

CVE-2018-5878

CVE-2018-5878 describes a buffer overflow during the handling of RIL_REQUEST_GET_SMSC_ADDRESS, affecting Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear. The issue is rooted in a memory management flaw in the response path, enabling potential overflow. Public metrics assign a base C...

CVE-2015-9134

CVE-2015-9134 affects Android devices with Qualcomm Snapdragon Mobile (SD 410/12, SD 615/16/SD 415, SD 810). The issue arises while processing QSEE Syscall qsee_macc_gen_ecc_privkey, where an untrusted pointer dereference can lead to arbitrary writes. Publicly available Android bulletin entries p...

CVE-2015-9208

CVE-2015-9208 affects Android on Qualcomm Snapdragon devices (various SoCs listed). The vulnerability arises because tzbsp_pil_verify_sig() does not strictly constrain the ELF/program headers and hash segment pointers to secure memory; it only ensures addresses are not in non-secure memory, allow...

CVE-2016-10501

CVE-2016-10501 covers Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and related small cell SoCs (FSM9055, MDM9xxx, MSM8xxx, SD series up to SD 835). The issue is the improper input validation during image parsing , as described in the NVD/NVD-affiliated entry. Impact is high: p...