vciy

Qualcomm, Inc. Snapdragon Mobile: 21 records in one advisory

21 records announced together, published 2018-04-18, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://source.android.com/security/bulletin/2018-04-01. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

17 of 21 records name something of its own. For the other 4, held sources say the same thing about each.

Most commonly mapped weakness across the batch: Buffer Copy without Checking Size of Input in…

What this page does not cover

This batch is 21 of the 310 records that cite the same advisory. The other 289 are different findings announced alongside it.

190 of them are on the sibling batches linked below. The remaining 99 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: android-2018-04-01-29db7ea287, android-2018-04-01-9c7343c19f, android-2018-04-01-a47b4c7c8c, android-2018-04-01-f134353565

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2014-10039qsee_app_entry_return qsee_app_entry restored olderLack of enforcement of proper sequence of calls…
CVE-2014-10044out-of-boundImproper Validation of Array Index in Core
CVE-2014-10046pdn throttle info freedUse after free vulnerability while handling…
CVE-2014-10057binary calibration files underImproper access control vulnerability in Audio.
CVE-2014-10059atcmd third party servicesImproper Access Control in Telephony
CVE-2014-10063fuse correctly blownAlways-Incorrect Control Flow Implementation in…
CVE-2015-9118adsp's root-pdInteger overflow to buffer overflow in ADSP…
CVE-2015-9124expose otherwise inaccessibleInformation Exposure in Core.
CVE-2015-9142vtableBuffer overflow vulnerability in Core
CVE-2015-9146passed-in delayedUntrusted pointer dereference in QDI read
CVE-2015-9147no title heldPossible Untrusted pointer dereference in Core
CVE-2015-9150computing later resultsInteger overflow to buffer overflow in the DIAG…
CVE-2015-9151no title heldPossible Untrusted Pointer Dereference in Core
CVE-2015-9195no title heldBuffer Copy without Checking Size of Input in…
CVE-2015-9215find_epNull Pointer Dereference in Core
CVE-2015-9223audioBuffer Copy without Checking Size of Input in…
CVE-2016-10406printing wlan_qmi_err_cb real printedInformation Exposure in Auto.
CVE-2016-10419initializing scheduler object objectBuffer Overread vulnerability in Modem
CVE-2016-10442msm8937 msm8952 running utilizeCode injection vulnerability when using kernel…
CVE-2016-10461no title heldBuffer overread vulnerability in HCI commands
CVE-2016-10479incoming qmi proxyBuffer overflow vulnerability in QMI Proxy

21 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.