QRD Android

CVEs (132)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-8487	Qualcomm QRD Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.
CVE-2016-10299	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.
CVE-2015-9012	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691.
CVE-2015-9010	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.
CVE-2015-9009	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.
CVE-2015-9008	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.
CVE-2014-9959	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694.
CVE-2014-9958	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774.
CVE-2014-9957	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564.
CVE-2014-9956	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611.
CVE-2014-9955	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686.
CVE-2014-9954	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559.
CVE-2014-9953	Google Android	Cri	0.64	9.8	0.01	Apr 4, 2018	An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.
CVE-2017-18147	Qualcomm Linux kernel	Cri	0.64	9.8	0.01	Apr 3, 2018	In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.
CVE-2017-14881	Qualcomm QRD Android	Cri	0.64	9.8	0.01	Mar 30, 2018	While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur.
CVE-2017-14876	Qualcomm QRD Android	Cri	0.64	9.8	0.01	Mar 30, 2018	In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write.
CVE-2016-10380	Google Android	Cri	0.64	9.8	0.01	Aug 18, 2017	In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.
CVE-2016-10347	Google Android	Cri	0.64	9.8	0.01	Aug 18, 2017	In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.
CVE-2016-10346	Qualcomm Linux kernel	Cri	0.64	9.8	0.01	Aug 18, 2017	In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.
CVE-2016-10343	Linux Kernel	Cri	0.64	9.8	0.01	Aug 18, 2017	In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.

CVE-2016-8487CriApr 4, 2018
Qualcomm
QRD Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.
CVE-2016-10299CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.
CVE-2015-9012CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691.
CVE-2015-9010CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.
CVE-2015-9009CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.
CVE-2015-9008CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.
CVE-2014-9959CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694.
CVE-2014-9958CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774.
CVE-2014-9957CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564.
CVE-2014-9956CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611.
CVE-2014-9955CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686.
CVE-2014-9954CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559.
CVE-2014-9953CriApr 4, 2018
Google
Android
risk 0.64cvss 9.8epss 0.01
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770.
CVE-2017-18147CriApr 3, 2018
Qualcomm
Linux kernel
risk 0.64cvss 9.8epss 0.01
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.
CVE-2017-14881CriMar 30, 2018
Qualcomm
QRD Android
risk 0.64cvss 9.8epss 0.01
While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur.
CVE-2017-14876CriMar 30, 2018
Qualcomm
QRD Android
risk 0.64cvss 9.8epss 0.01
In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write.
CVE-2016-10380CriAug 18, 2017
Google
Android
risk 0.64cvss 9.8epss 0.01
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.
CVE-2016-10347CriAug 18, 2017
Google
Android
risk 0.64cvss 9.8epss 0.01
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.
CVE-2016-10346CriAug 18, 2017
Qualcomm
Linux kernel
risk 0.64cvss 9.8epss 0.01
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.
CVE-2016-10343CriAug 18, 2017
Linux
Kernel
risk 0.64cvss 9.8epss 0.01
In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.

Page 1 of 7