Back to all categorys

Vulnerabilities in Qualcomm components

CVE-2016-3926

(json)

• CVE numbers: CVE-2016-3926 [Bulletin-CVE-2016-3926]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka internal bug 28823953. [NIST-CVE-2016-3926]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-3926]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3926]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-3927

(json)

• CVE numbers: CVE-2016-3927 [Bulletin-CVE-2016-3927]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823244. [NIST-CVE-2016-3927]
• Discovered by: on: Unknown
• Reported on: 2016-10-01 [Bulletin-CVE-2016-3927]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-3927]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-6727

(json)

• CVE numbers: CVE-2016-6727 [Bulletin-CVE-2016-6727]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. [NIST-CVE-2016-6727]
• Discovered by: on: Unknown
• Reported on: 2016-11-01 [Bulletin-CVE-2016-6727]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-6727]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-8411

(json)

• CVE numbers: CVE-2016-8411 [Bulletin-CVE-2016-8411]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775. [NIST-CVE-2016-8411]
• Discovered by: on: Unknown
• Reported on: 2016-12-01 [Bulletin-CVE-2016-8411]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8411]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2016-8438

(json)

• CVE numbers: CVE-2016-8438 [Bulletin-CVE-2016-8438]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: QC-CR#1023638. [NIST-CVE-2016-8438]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8438]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8438]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2016-8442

(json)

• CVE numbers: CVE-2016-8442 [Bulletin-CVE-2016-8442]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android. Versions: Kernel 3.18. Android ID: A-31625910. QC-CR#1038173. [NIST-CVE-2016-8442]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8442]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8442]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2016-8443

(json)

• CVE numbers: CVE-2016-8443 [Bulletin-CVE-2016-8443]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.18. Android ID: A-32576499. References: QC-CR#964185. [NIST-CVE-2016-8443]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8443]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8443]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2017-0431

(json)

• CVE numbers: CVE-2017-0431 [Bulletin-CVE-2017-0431]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899. [NIST-CVE-2017-0431]
• Discovered by: on: Unknown
• Reported on: 2017-02-01 [Bulletin-CVE-2017-0431]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2017-0431]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2016-8484

(json)

• CVE numbers: CVE-2016-8484 [Bulletin-CVE-2016-8484]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575. [NIST-CVE-2016-8484]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-8484]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8484]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-8485

(json)

• CVE numbers: CVE-2016-8485 [Bulletin-CVE-2016-8485]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681. [NIST-CVE-2016-8485]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-8485]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8485]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-8486

(json)

• CVE numbers: CVE-2016-8486 [Bulletin-CVE-2016-8486]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691. [NIST-CVE-2016-8486]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-8486]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8486]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-8487

(json)

• CVE numbers: CVE-2016-8487 [Bulletin-CVE-2016-8487]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724. [NIST-CVE-2016-8487]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-8487]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8487]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-8488

(json)

• CVE numbers: CVE-2016-8488 [Bulletin-CVE-2016-8488]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756. [NIST-CVE-2016-8488]
• Discovered by: on: Unknown
• Reported on: 2017-03-01 [Bulletin-CVE-2016-8488]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8488]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9931

(json)

• CVE numbers: CVE-2014-9931 [Bulletin-CVE-2014-9931]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app region size customization due to a hard-coded value. [NIST-CVE-2014-9931]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9931]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9931]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9932

(json)

• CVE numbers: CVE-2014-9932 [Bulletin-CVE-2014-9932]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation. [NIST-CVE-2014-9932]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9932]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9932]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9933

(json)

• CVE numbers: CVE-2014-9933 [Bulletin-CVE-2014-9933]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access. [NIST-CVE-2014-9933]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9933]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9933]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9934

(json)

• CVE numbers: CVE-2014-9934 [Bulletin-CVE-2014-9934]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding. [NIST-CVE-2014-9934]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9934]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9934]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9935

(json)

• CVE numbers: CVE-2014-9935 [Bulletin-CVE-2014-9935]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2014-9935]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9935]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9935]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9936

(json)

• CVE numbers: CVE-2014-9936 [Bulletin-CVE-2014-9936]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2014-9936]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9936]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9936]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9937

(json)

• CVE numbers: CVE-2014-9937 [Bulletin-CVE-2014-9937]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2014-9937]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2014-9937]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9937]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-8995

(json)

• CVE numbers: CVE-2015-8995 [Bulletin-CVE-2015-8995]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-8995]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-8995]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8995]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-8996

(json)

• CVE numbers: CVE-2015-8996 [Bulletin-CVE-2015-8996]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-8996]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-8996]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8996]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-8997

(json)

• CVE numbers: CVE-2015-8997 [Bulletin-CVE-2015-8997]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-8997]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-8997]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8997]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-8998

(json)

• CVE numbers: CVE-2015-8998 [Bulletin-CVE-2015-8998]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-8998]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-8998]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8998]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-8999

(json)

• CVE numbers: CVE-2015-8999 [Bulletin-CVE-2015-8999]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an ELF file. [NIST-CVE-2015-8999]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-8999]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-8999]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-9000

(json)

• CVE numbers: CVE-2015-9000 [Bulletin-CVE-2015-9000]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-9000]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-9000]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9000]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-9001

(json)

• CVE numbers: CVE-2015-9001 [Bulletin-CVE-2015-9001]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-9001]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-9001]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9001]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-9002

(json)

• CVE numbers: CVE-2015-9002 [Bulletin-CVE-2015-9002]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-9002]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-9002]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9002]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2015-9003

(json)

• CVE numbers: CVE-2015-9003 [Bulletin-CVE-2015-9003]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel. [NIST-CVE-2015-9003]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2015-9003]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9003]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-10237

(json)

• CVE numbers: CVE-2016-10237 [Bulletin-CVE-2016-10237]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory. [NIST-CVE-2016-10237]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2016-10237]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10237]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-10238

(json)

• CVE numbers: CVE-2016-10238 [Bulletin-CVE-2016-10238]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue. [NIST-CVE-2016-10238]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2016-10238]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10238]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2016-10242

(json)

• CVE numbers: CVE-2016-10242 [Bulletin-CVE-2016-10242]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel. [NIST-CVE-2016-10242]
• Discovered by: on: Unknown
• Reported on: 2017-04-01 [Bulletin-CVE-2016-10242]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10242]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-26

CVE-2014-9923

(json)

• CVE numbers: CVE-2014-9923 [Bulletin-CVE-2014-9923]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. [NIST-CVE-2014-9923]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9923]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9923]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9924

(json)

• CVE numbers: CVE-2014-9924 [Bulletin-CVE-2014-9924]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur. [NIST-CVE-2014-9924]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9924]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9924]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9925

(json)

• CVE numbers: CVE-2014-9925 [Bulletin-CVE-2014-9925]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. [NIST-CVE-2014-9925]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9925]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9925]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9926

(json)

• CVE numbers: CVE-2014-9926 [Bulletin-CVE-2014-9926]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. [NIST-CVE-2014-9926]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9926]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9926]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9927

(json)

• CVE numbers: CVE-2014-9927 [Bulletin-CVE-2014-9927]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. [NIST-CVE-2014-9927]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9927]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9927]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9928

(json)

• CVE numbers: CVE-2014-9928 [Bulletin-CVE-2014-9928]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist. [NIST-CVE-2014-9928]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9928]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9928]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9929

(json)

• CVE numbers: CVE-2014-9929 [Bulletin-CVE-2014-9929]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist. [NIST-CVE-2014-9929]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9929]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9929]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2014-9930

(json)

• CVE numbers: CVE-2014-9930 [Bulletin-CVE-2014-9930]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. [NIST-CVE-2014-9930]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2014-9930]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2014-9930]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2015-9005

(json)

• CVE numbers: CVE-2015-9005 [Bulletin-CVE-2015-9005]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist. [NIST-CVE-2015-9005]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2015-9005]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9005]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2015-9006

(json)

• CVE numbers: CVE-2015-9006 [Bulletin-CVE-2015-9006]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist. [NIST-CVE-2015-9006]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2015-9006]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9006]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2015-9007

(json)

• CVE numbers: CVE-2015-9007 [Bulletin-CVE-2015-9007]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist. [NIST-CVE-2015-9007]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2015-9007]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2015-9007]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2016-10240

(json)

• CVE numbers: CVE-2016-10240 [Bulletin-CVE-2016-10240]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details:
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2016-10240]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10240]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2016-10241

(json)

• CVE numbers: CVE-2016-10241 [Bulletin-CVE-2016-10241]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details:
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2016-10241]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10241]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30

CVE-2016-10297

(json)

• CVE numbers: CVE-2016-10297 [Bulletin-CVE-2016-10297]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist. [NIST-CVE-2016-10297]
• Discovered by: on: Unknown
• Reported on: 2017-05-01 [Bulletin-CVE-2016-10297]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-10297]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30