CVE-2015-9222

CVE-2015-9222 corresponds to RomPager Misfortune Cookie authentication bypass. Affected: RomPager

CVE-2015-9165

CVE-2015-9165 affects Android devices with Qualcomm Snapdragon/related SoCs (IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 400/410/12/615/16/ SD 415/617/650/52/ SD 808/810) where a flaw in the QTEE file service API allows a double-free due to incorrect error handling. The vulnerability ...

CVE-2014-9986

CVE-2014-9986 concerns Android devices with Qualcomm components (e.g., Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear MSM8909W, SD系列) where in playready_licacq_process_response(), the length of the cbResponse is not validated and is controlled by the HLOS. If cbResponse is too large, a...

CVE-2015-9128

CVE-2015-9128 describes a buffer overread caused by lack of validation of the buffer size in Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) across multiple SD/x variants. The issue affects devices with Android before the 2018-04-05 security patch level and is addressed by the...

CVE-2017-18146

CVE-2017-18146 affects Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear; various SDM/MDM/SD chips). In vulnerable builds prior to the 2018-04-05 patch level, ECDSA signature verification can fail in corner cases, potentially impacting message authentication. The issue is listed ...

CVE-2015-9198

Summary of CVE-2015-9198 : An integer underflow in the Qualcomm qsee_register_log_buff function allows writing beyond intended bounds, potentially corrupting secure memory. The public records identify affected Android builds on Qualcomm-based devices (e.g., Snapdragon Automobile, Snapdragon Mobil...

CVE-2015-9131

CVE-2015-9131 corresponds to an input validation flaw in Qualcomm’s qsee on Android devices, affecting Snapdragon targets (SD 400/410/12, 615/16/SD 415, 800, 808, 810). The issue can enable unauthorized memory access due to lack of input validation. Public details in the connected documents show ...

CVE-2014-9997

CVE-2014-9997 affects Android on Qualcomm Snapdragon platforms (various SoCs) where PRDiagMaintenanceHandler lacks input validation, causing a buffer over-read. The issue spans multiple Snapdragon products listed in the initial description; CVSS scores indicate Critical impact (C/H, I/H, A/H) wit...

CVE-2014-10052

The CVE-2014-10052 issue affects Android on Qualcomm TZ subsystem usage (TZ apps and PIL image subsystem) where reserved memory is not cleared after use. Affected platforms include Android builds before 2018-04-05 patch level across numerous Snapdragon Mobile, Wear, and related SoCs (e.g., FSM905...

CVE-2015-9136

CVE-2015-9136 describes a buffer overflow in the Android/Qualcomm host driver during pre-auth requests, caused when FT IEs from the supplicant exceed the expected size. The vulnerability affects a wide range of Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206, MDM9607, MDM9...

CVE-2015-9207

CVE-2015-9207 describes a buffer overread in playready_getadditional_responsedata due to insufficient input validation, affecting Android devices on Qualcomm Snapdragon Mobile and Snapdragon Wear (MSM8909W) and a range of Qualcomm SoCs (SD 210/212/205, 400, 410/12, 615/16/415, 617, 650/52, 800, 8...

CVE-2015-9217

CVE-2015-9217 involves malformed HVEC clips that can trigger an assertion failure in Android devices on Qualcomm Snapdragon platforms (numerous models) prior to the 2018-04-05 security patch level. The issue is described in the CVE entry with a Local attack vector and impacts to confidentiality, ...

CVE-2015-9224

The CVE-2015-9224 issue stems from a lack of input validation in QURTK_write() on Qualcomm Snapdragon platforms (listed: Snapdragon Automobile, Mobile, Wear, Small Cell SoCs and various SD/SM/DMM variants) running Android with patch levels older than 2018-04-05. Root cause: insufficient input val...

CVE-2016-10420

CVE-2016-10420 affects Android devices with Qualcomm Snapdragon/mobile platforms listed (e.g., MDM9206/9607/9650 and SD family up to SDX20). The issue arises while playing a .flv clip that lacks an inbuilt seek table, where a dynamic index table access goes out of bounds, causing a crash (availab...

CVE-2016-10448

CVE-2016-10448 affects Android on Qualcomm Snapdragon platforms (multiple SoCs) where addSA/updateSA commands on the same SA can race. The root cause is that APIs addSA and updateSA access the global ipsec_sa_list[] without mutex protection, enabling memory corruption under concurrent operations....

CVE-2017-18139

CVE-2017-18139 describes a buffer overflow vulnerability in Android prior to the 2018-04-05 patch level affecting Qualcomm Snapdragon mobile/wear platforms (e.g., MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD series). The flaw could exist during IMS call setup, potentially enabling an expl...

CVE-2015-9122

CVE-2015-9122 describes a possible buffer overflow in Android on Qualcomm Snapdragon/mobile SoCs when a SIM response exceeds 64 KB for a stream APDU command. Affected products include a wide range of Qualcomm/Snapdragon modems and Android devices, with the issue stemming from handling large APDU ...

CVE-2015-9157

CVE-2015-9157 describes a race-condition in Android Qualcomm widevine support where rsp buffers passed to widevine commands in widevine_dash_cmd_handler() can be read or overflowed due to memory not being locked during time-of-check/time-of-use. Affected are Android devices with Qualcomm Snapdrag...

CVE-2015-9191

In CVE-2015-9191, the flaw is a NULL pointer/untrusted pointer dereference in a QTEE syscall handler affecting Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (MDM9206/9607/9635M/9640/9645/9650/9655, MSM8909W, SD 210/212/205, SD 400/410/12, SD 617, SD 650/52, SD 808/...

CVE-2015-9199

CVE-2015-9199 describes a vulnerability in Android on Qualcomm Snapdragon platforms (Automobile and Mobile) affecting multiple SoCs including IPQ4019 and various SDx devices. The root cause is a non-secure region check performed during QSEE buffer address registration (passed by the HLOS) but not...

CVE-2016-10474

Technical details about CVE-2016-10474 are not publicly available in the provided connected documents. The initial description references a buffer-length overflow in RIL handling, but there are no vendor, product, version, or mitigation specifics available here. Monitor for updates.

CVE-2016-10494

CVE-2016-10494 affects Qualcomm Snapdragon Auto/Mobile/Wear platforms (various SD/MDM/SoC families). The issue is an integer overflow that can cause buffer overflows in the IPC router Root-PD driver. Impact is serious: high to critical severity with network attack vector and potential memory corr...

CVE-2014-10048

CVE-2014-10048 affects Android on Qualcomm Snapdragon mobile/wear platforms (numerous SKUs) prior to the 2018-04-05 security patch level. The issue arises in time-services when setting offsets, where bases can be configured to values greater than the valid base, causing an array index out-of-boun...

CVE-2014-10054

CVE-2014-10054 concerns Android/QCOM BT HCI related privilege escalation due to lack of input validation when processing BT HCI commands. The core issue affects various Snapdragon/Qualcomm platforms (Android before 2018-04-05 SPL; see CNVD/NVD entries) and has a high/critical CVSS potential (up t...

CVE-2015-9135

This CVE (CVE-2015-9135) affects Android devices with Qualcomm Snapdragon/mobile SoCs (e.g., MDM9625/63/64x series, MSM8909W, SD 210/212/205, 400/410/12, 615/16/415, 617, 650/52, 800, 808, 810) where a QTEE syscall handler may dereference an untrusted pointer. The root cause is an untrusted point...

CVE-2015-9137

CVE-2015-9137 describes a vulnerability in Android where, on Qualcomm Snapdragon platforms (various models listed), several EFS2 DIAG command handlers fail to call fs_diag_access_check(), due to an insufficient access-control check in the DIAG path. The issue is triggered on Android devices using...

CVE-2015-9138

CVE-2015-9138 affects Android devices with Qualcomm-based SoCs. The issue arises when performing RSA encryption: the ce_util_to_unsigned_bin function uses the input address (c) instead of the buffer size, which can cause a logic overrun and potentially a buffer overflow. The vulnerability is desc...

CVE-2016-10410

CVE-2016-10410 is a buffer overflow in RTP processing during VoLTE calls affecting Android devices with Qualcomm Snapdragon Mobile/Wear platforms (wide list of affected Snapdragon SoCs). The issue is documented as exploitable via network conditions and could impact confidentiality, integrity, and...

CVE-2016-10438

CVE-2016-10438 is an information exposure issue in Android devices affected by Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055, IPQ4019/IPQ8064, and various SD/SoC families. The root cause is logging of debug statements using %p, which could expose kernel or driver pointers. The repor...

CVE-2016-10493

Technical details about CVE-2016-10493 are not publicly provided in the supplied documents. The materials summarize affected Android/Qualcomm components and patch timelines but do not disclose root cause specifics, exact affected versions beyond general ranges, exploit status, or fixes.

CVE-2015-9120

CVE-2015-9120 affects Android devices on Qualcomm Snapdragon platforms (Automotive, Mobile, Wear) prior to the 2018-04-05 patch level, where the Core detects an Error Condition Without Action. The issue is tied to multiple Snapdragon SoCs (e.g., IPQ4019, SD 210/212/205, 400/410/12, 425, 430, 450,...

CVE-2015-9167

CVE-2015-9167 affects Qualcomm Snapdragon platforms (Automobile and Mobile) across SD 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, and 820A. Description: an integer underflow in an EMM command can occur. The issue is documented in multiple sources (NVD, CVE lists)...

CVE-2017-18138

CVE-2017-18138 describes a buffer overflow in GERAN within Android prior to the 2018-04-05 patch level on Qualcomm-based devices (various Snapdragon Mobile/Wear platforms listed). The vulnerability is triggered in a Qualcomm GERAN component and may potentially allow memory corruption. The Connect...

CVE-2018-3594

CVE-2018-3594 affects Android devices using Qualcomm Snapdragon (Automobile, Mobile, Wear) where ID3 tag private frame parsing can trigger a buffer over-read during comparison of frame data to owner identifier strings. The issue is described as a buffer over-read in specific ID3 frame parsing pat...

CVE-2014-9989

CVE-2014-9989 affects Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MDM9206/9607/9615/9625/9635M, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/600/615/16/SD 415/625/650/52/808/810/450, etc.). The vulnerability is in the USB management module and is triggered by...

CVE-2015-9203

CVE-2015-9203 describes a buffer overread caused by missing input validation in playready_set_domainid on a wide range of Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) and various Snapdragon SoCs. This affects Android versions up to the 2018-04-05 security patch level; the issue is doc...

CVE-2015-9218

CVE-2015-9218 describes a hang in Android devices when processing certain HEVC clips, occurring on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 625, 650/52, 800, 808, 810, 820, 835, 845, SDM630/636/660, Snapdragon_High_Med_2016) ...

CVE-2016-10424

CVE-2016-10424 concerns an issue in the LibPNG library used on Android devices. The provided records show that, for affected Android builds, upgrading LibPNG from 1.6.12 to 1.6.21 fixes multiple issues described by different CWEs. The Android CVE entry ties the vulnerability to the need for a pat...

CVE-2016-10462

CVE-2016-10462 affects Android platforms with Qualcomm SoCs where HLOS Access Control policy could allow access to Slimbus, GPU, and GIC resources due to insufficient isolation in certain Snapdragon generations (e.g., SD 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 808, 810, 820/8...

CVE-2016-10492

CVE-2016-10492 affects Android devices running on Qualcomm Snapdragon/mobile platforms. The issue arises from improper ciphersuite validation, allowing SecSSL to accept an unadvertised ciphersuite. Reported impact includes high confidentiality and integrity concerns (per CVSSv3: Critical, 9.1; CV...

CVE-2014-9993

CVE-2014-9993 is a buffer overread vulnerability affecting Android on Qualcomm Snapdragon platforms (including automotive/mobile/wear MDMs and Snapdragon SD/SoC families) that may occur when provisioning content with a large message. The available sources describe the issue as a large-message pro...

CVE-2015-9140

CVE-2015-9140 affects Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and listed Small Cell SoCs (e.g., FSM9055, MDM9xxx, MSM8909W, SD family) where the online memory dump feature can allow unauthorized memory access. Root cause: improper protection in the online memory dump path...

CVE-2015-9163

Summary (CVE-2015-9163) : In Android on Qualcomm Snapdragon platforms (Automobile, Mobile, Wear: MDM9206/9650/8909W, SD 210–850 variants) prior to the 2018-04-05 SPL, a vulnerability in a PlayReady function can lead to information exposure (confidentiality impact). The issue is identified in mult...

CVE-2015-9172

The CVE-2015-9172 issue affects Android platforms with WideVine API on Qualcomm Snapdragon families (Automotive, Mobile, Wear) including devices using SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835, 845, 850. In a WideVine API function, a bu...

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

CVE-2015-9190

CVE-2015-9190 describes an integer overflow in boot_clobber_check_local_address_range() on certain Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/410/12/16, SD 600/615/16/SD 415, SD 808, SD 810, IPQ4019, MDM9xx, MSM89xx, etc.). The overflow can bypass the clobber protection check, leading ...

CVE-2016-10437

CVE-2016-10437 is an information-disclosure vulnerability affecting Android devices with Qualcomm networking components. In affected Android versions prior to 2018-04-05 patch level (and related patches for various Qualcomm SoCs such as Small Cell, Snapdragon Mobile/Wear families and SDR devices ...

CVE-2016-10457

CVE-2016-10457 affects Android on Qualcomm Snapdragon-based devices (multiple SoCs listed) where an app requests more permissions than required. The issue is described as a permission overreach with a high-impact risk profile (CVSS v3: 9.8, Network, No user interaction) and is documented for Andr...

CVE-2016-10472

CVE-2016-10472 affects Qualcomm Snapdragon mobile and wearable SoCs (e.g., MDM9206/9607/9650, MSM8909W, SD 210/212/205, 400, 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835, SDX20). Root cause: HLOS kernel failed to check address and size passed to TZ_INFO_GET_SE...

CVE-2014-9988

CVE-2014-9988 affects Android on Qualcomm Snapdragon devices (Automotive, Mobile, Wear, and listed SD families). Root cause: lack of input validation for message length leads to a buffer over-read in drm_app_encapsulate_save_keys. Impact: critical risk across confidentiality, integrity, and avail...