Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9148 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T04:25:15.573Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Integer Overflow to Buffer Overflow in Services. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD 450, SD 600, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, in the Diag User-PD command registration function, a length variable used during buffer allocation is not checked, so if it
the Diag User-PD command registration function, a length variable used during buffer allocation is not checked, so if it is very large, an integer overflow followed by a buffer overflow occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9149 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:47:05.736Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Untrusted Pointer Dereference in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a DIAG ioctl handler, an untrusted pointer dereference can occur. Additional Analyst Notes: - CVE
SD 845, and SD 850, in a DIAG ioctl handler, an untrusted pointer dereference can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9150 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:56:43.963Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer overflow to buffer overflow in the DIAG event handler Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, while computing the length of memory allocated for a Diag event, if the buffer length is very small or greater than the maximum, an integer overflow may occur, which later results in a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-0
ow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9151 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:12:34.118Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Possible Untrusted Pointer Dereference in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9152 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:14:17.896Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Improper Access Control in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 800, SD 810, SD 820, SD 820A, SD 835, and Snapdragon_High_Med_2016, modem owned regions are accessible from secure side. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ible from secure side. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9153 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:41:40.590Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-read in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a DRM function, a buffer over-read can occur. Additional Analyst Notes: - CVE Program Contain
35, SD 845, and SD 850, in a DRM function, a buffer over-read can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9154 State: REJECTED Published: 2021-11-23T19:58:38 Last Updated: 2021-11-23T19:58:38 Description: No description available.
CVE ID: CVE-2015-9155 State: REJECTED Published: 2021-11-23T19:58:39 Last Updated: 2021-11-23T19:58:39 Description: No description available.
CVE ID: CVE-2015-9156 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:56:10.594Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overflow vulnerability in Modem Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 800, SD 808, and SD 810, when making a high speed Dual Carrier Downlink Data call in a multicell environment, a buffer overflow may occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.
vironment, a buffer overflow may occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9157 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:00:25.710Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Time-of-check Time-of-use (TOCTOU) Race Condition in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in widevine_dash_cmd_handler(), rsp buffers are passed off to widevine commands. These rsp buffers have values in them, such as buffer lengths, that need
sp buffers are passed off to widevine commands. These rsp buffers have values in them, such as buffer lengths, that need to be validated to ensure that no buffer overflow/over-reads happen. However, rsp buffers are not always in locked memory, meaning a time-of-check, time-of-use issue can occur where we check that the value is valid, but then a race condition occurs where this memory is swapped out with a different, possibly out of range, value. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9158 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:11:54.843Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size of Input in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a QTEE crypto function, a buffer overflow can occur. Additional Analy
0, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a QTEE crypto function, a buffer overflow can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9159 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T16:13:27.755Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Copy without Checking Size in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation OEMCrypto_GetRandom can cause potential buffer overflow. Addi
820A, SD 835, SD 845, and SD 850, lack of input validation OEMCrypto_GetRandom can cause potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9160 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T23:50:34.599Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Integer overflow in Graphics driver Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, integer overflow may occur when values passed from HLOS (graphics driver
, SD 820, SD 820A, SD 835, SD 845, and SD 850, integer overflow may occur when values passed from HLOS (graphics driver busy time, and total time) in TZBSP_GFX_DCVS_UPDATE_ID are very large. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9161 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:14:02.269Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: TOCTOU vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, TOCTOU condition could lead to a buffer overflow in function playready_reader_bind(). Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com
CVE ID: CVE-2015-9162 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T01:30:55.249Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Use after Free in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the function "Certificate_CreateWithBuffer" in the QSEE app TQS, in case of memory allocation failure, we free the memory and return the pointer without setting it to NULL. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/10367
ontainer: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9163 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:36:27.439Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Information Exposure in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a PlayReady function, information exposure can occur. Additional Analyst Notes: - CVE Progr
835, SD 845, and SD 850, in a PlayReady function, information exposure can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9164 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T17:18:20.676Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in Playready Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 820A, a buffer overread in Playready may occur due to lack of input validation of the buffer size provided by HLOS. Additional Analys
r overread in Playready may occur due to lack of input validation of the buffer size provided by HLOS. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9165 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T00:30:36.802Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Double free vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, incorrect error handling could lead to a double free in QTEE file service API. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.
CVE ID: CVE-2015-9166 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T18:44:40.898Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Improper Access Control in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, DRM provisioning mechanisms used in QSEE applications have a feature to prevent furth
820A, SD 835, SD 845, and SD 850, DRM provisioning mechanisms used in QSEE applications have a feature to prevent further provisioning. This is done by creating an SFS file called 'finalize_prov_flag.data' at the end of provisioning. When this feature is enabled, provisioning calls check for the existence of the file in order to decide whether to do provisioning or not. Current implementation allows provisioning without sufficient checks. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9167 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:58:35.276Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Integer Underflow (Wrap or Wraparound) in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 820A, in an EMM command, an integer underflow can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.
CVE ID: CVE-2015-9168 State: REJECTED Published: 2021-11-23T19:58:39 Last Updated: 2021-11-23T19:58:39 Description: No description available.
CVE ID: CVE-2015-9169 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T22:46:35.912Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in content protection manager Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, buffer over-read in QSEE app may cause confidential information to be leaked. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http:
al Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9170 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T02:05:33.462Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, incorrect offset check in wv_dash_core_refresh_keys() may lead to a buffer overread. Addit
, SD 835, SD 845, and SD 850, incorrect offset check in wv_dash_core_refresh_keys() may lead to a buffer overread. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9171 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T23:21:09.216Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer overread vulnerability in Core. Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if OEMCrypto_Dash_InstallEncapKeybox() is called with keyBoxLength set to a value higher than TZ_WV_MAX_D
5, and SD 850, if OEMCrypto_Dash_InstallEncapKeybox() is called with keyBoxLength set to a value higher than TZ_WV_MAX_DATA_LEN (20k), a buffer over-read occurs. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9172 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-17T03:34:26.797Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Buffer Over-read in TrustZone Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a WideVine API function, a buffer over-read can occur. Additional Analyst Notes: - CVE Program Container:
and SD 850, in a WideVine API function, a buffer over-read can occur. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9173 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T23:56:11.213Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Detection of Error Condition without Action in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, missing of return value check in memscpy can cause memory corruption in TQS App. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9174 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T20:03:16.204Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Buffer overflow vulnerability in TQS Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of validation of the return value prior to using for buffer allocation in QSEE application, TQS, may result in memory overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9175 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T18:24:35.140Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Untrusted pointer dereference in QTEE Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation could lead to an untrusted pointer dereference in wv_dash_core_ge
, SD 835, SD 845, and SD 850, lack of input validation could lead to an untrusted pointer dereference in wv_dash_core_generic_verify(). Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671
CVE ID: CVE-2015-9176 State: PUBLISHED Published: 2018-04-18T14:00:00Z Last Updated: 2024-09-16T19:00:50.939Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear Problem Types: Untrusted Pointer Dereference in Core Description: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, Input_address is registered as a shared buffer and is not properly checked before use in O
, SD 835, SD 845, and SD 850, Input_address is registered as a shared buffer and is not properly checked before use in OEMCrypto_Generic_Sign(). This allows addresses to be accessed that reside in secure/CP memory. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2018-04-01 - http://www.securityfocus.com/bid/103671