Home / Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: 61 records in one advisory Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: 61 records in one advisory 61 records announced together, published 2018-04-18, every one of them citing the same advisory.
What the records offer No record in this batch publishes a fixed version in held sources.
No record in this batch is listed by CISA in held sources.
12 of 61 records name something of its own. For the other 49, held sources say the same thing about each.
Most commonly mapped weakness across the batch: Buffer Over-read in TrustZone.
What this page does not cover This batch is 61 of the 310 records that cite the same advisory. The other 249 are different findings announced alongside it.
150 of them are on the sibling batches linked below. The remaining 99 are grouped with nothing and have only their own record pages.
Other batches under the same advisory: android-2018-04-01-9c7343c19f , android-2018-04-01-a47b4c7c8c , android-2018-04-01-f134353565 , android-2018-04-01-ffd03706cf
The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.
Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.
CVE-2014-9986 playready_licacq_process_response cbresponse Buffer Over-Read in Core. CVE-2014-9993 no title held Buffer overread vulnerability in content… CVE-2014-9998 signature Buffer overflow vulnerability while processing… CVE-2015-9120 no title held A device hang or crash occurs when an abort… CVE-2015-9128 no title held Buffer over-read vulnerability in Playready App CVE-2015-9129 no title held Integer Underflow (Wrap or Wraparound) in Core. CVE-2015-9138 no title held Buffer Copy without Checking Size of Input… CVE-2015-9158 no title held Buffer Copy without Checking Size of Input in… CVE-2015-9159 no title held Buffer Copy without Checking Size in Core CVE-2015-9164 no title held Buffer overread vulnerability in Playready CVE-2015-9171 oemcrypto_dash_installencapkeybox Buffer overread vulnerability in Core. CVE-2015-9178 no title held Untrusted pointer dereference vulnerability in… CVE-2015-9180 no title held Buffer Copy without Checking Size of Input… CVE-2015-9188 no title held Untrusted pointer dereference vulnerability in… CVE-2015-9192 no title held Improper input validation vulnerability in the… CVE-2015-9193 no title held Buffer over-read vulnerability in Playready CVE-2015-9202 no title held Buffer overread vulnerability in Playready CVE-2015-9211 no title held Buffer overread vulnerability in Playready CVE-2016-10418 enable pmic through tcsr_qpdi_disable_cfg TCSR_QPDI_DISABLE_CFG register is unprotected CVE-2016-10424 upgrading libpng Multiple security vulnerabilities in LibPNG… CVE-2016-10446 ocimem provide nonsecure software Incorrect configuration of OCIMEM MPU start and… CVE-2016-10474 no title held Integer overflow to buffer overflow in QC RIL… CVE-2016-10484 no title held Integer overflow to buffer overflow in RPMB CVE-2016-10493 npa routines Untrusted pointer dereference in NPA routines… 61 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.