vciy

Qualcomm, Inc. All Qualcomm products: 38 records in one advisory

38 records announced together, published 2017-08-18, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://source.android.com/security/bulletin/2017-07-01. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

25 of 38 records name something of its own. For the other 13, held sources say the same thing about each.

Most commonly mapped weakness across the batch: Buffer Copy without Checking Size of Input in…

What this page does not cover

This batch is 38 of the 159 records that cite the same advisory. The other 121 are different findings announced alongside it.

None of those 121 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2014-9968uimdiagBuffer Copy without Checking Size of Input in…
CVE-2014-9975full disk encryptionImproper Authentication in TrustZone
CVE-2014-9977no title heldBuffer Copy without Checking Size of Input in…
CVE-2014-9978no title heldBuffer Copy without Checking Size of Input in…
CVE-2014-9979uninitialized compromiseUse of Uninitialized Variable in TrustZone
CVE-2014-9980sample appInformation Exposure in TrustZone
CVE-2015-8592prior guest-osUntrusted Pointer Dereference in Diag
CVE-2015-8595digital television/digitalBuffer Over-read in TrustZone
CVE-2015-9034string fail null-terminated sipBuffer Copy without Checking Size of Input in…
CVE-2015-9035fails longer needed exhaustionUncontrolled Resource Consumption Vulnerability…
CVE-2015-90373g nasBuffer Over-read Vulnerability in NAS
CVE-2015-9038front endNULL Pointer Dereference Vulnerability in RFA
CVE-2015-9039embms sequence messagesReachable Assertion Vulnerability in LTE
CVE-2015-9040apiBuffer Copy without Checking Size of Input in…
CVE-2015-9041wcdma tuningBuffer Copy without Checking Size of Input in…
CVE-2015-9042qmiBuffer Copy without Checking Size of Input in…
CVE-2015-9043upon expiry timerNULL Pointer Dereference Vulnerability in LTE
CVE-2015-9044no title heldReachable Assertion Vulnerability in LTE
CVE-2015-9045overflown taking power measurementsBuffer Copy without Checking Size of Input in…
CVE-2015-9046no title heldReachable Assertion Vulnerability in LTE
CVE-2015-9047gnss scan bootupBuffer Copy without Checking Size of Input in…
CVE-2015-9048lost rtp packetsImproper Validation of Array Index…
CVE-2015-9049no title heldBuffer Copy without Checking Size of Input in…
CVE-2015-9050caImproper Validation of Array Index…
CVE-2015-9051no title heldReachable Assertion Vulnerability in LTE
CVE-2015-9052no title heldReachable Assertion Vulnerability in LTE
CVE-2015-9053no title heldBuffer Copy without Checking Size of Input in…
CVE-2015-9054gal decodingNULL Pointer Dereference Vulnerability in GNSS
CVE-2015-9060no title heldUntrusted Pointer Dereference in TrustZone
CVE-2015-9067potential compiler optimization memsetInformation Exposure in TrustZone
CVE-2015-9070no title heldBuffer Over-read in TrustZone
CVE-2015-9071no title heldBuffer Over-read in TrustZone
CVE-2016-103883rd-partyConfiguration Vulnerability in TrustZone
CVE-2017-8263fault doing operations read-onlyImproper Input Validation in Kernel
CVE-2017-8265doubleTime-of-check Time-of-use Race Condition in…
CVE-2017-8266no title heldTime-of-check Time-of-use (TOCTOU) Race…
CVE-2017-8267thenInteger Overflow to Buffer Overflow in Kernel
CVE-2017-8270no title heldUse After Free in WLAN

38 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.