Skip to contentQualcomm, Inc. Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq6018 firmware +18 more +20 moreOut of bound access due to Invalid inputs to dapm mux settings which results into kernel failure...CVE-2019-140639.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 moreUninitialized stack data gets used If memory is not allocated for blob or if the allocated blob...CVE-2019-140607.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreThere is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer...CVE-2019-105677.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 moreUse after free while processing eeprom query as there is a chance to not unlock mutex after error...CVE-2019-140347.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, mdm9607 firmware +14 more +16 moreUse after free issue occurs when camera access sensors data through direct report mode in...CVE-2019-105837.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +37 more +39 morePossible integer overflow while multiplying two integers of 32 bit in QDCM API of get display...CVE-2019-105927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8098 firmware, msm8909w firmware +14 more +16 moreUse after free issue occurs when command destructors access dynamically allocated response buffer...CVE-2019-104845.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreLack of check to ensure crypto engine data passed by user is initialized can result in bus error...CVE-2019-23239.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreImproper validation of read and write index of tx and rx fifo`s before calculating pointer can...CVE-2019-22839.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +34 more +36 moreDereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec...CVE-2019-105419.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 moreNull-pointer dereference can occur while accessing the super index entry when it is not been...CVE-2019-105349.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 moreOut of bound access due to improper validation of array index cause the index table entry to get...CVE-2019-105339.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +22 more +24 morePossible stack overflow when an index equal to io buffer size is accessed in camera module in...CVE-2019-105027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 moreBuffer overflow due to improper validation of buffer size while IPA driver processing to perform...CVE-2019-23337.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +19 more +21 morePossible use-after-free issue due to a race condition while calling camera ioctl concurrently in...CVE-2019-22847.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +25 more +27 moreLack of check of address range received from firmware response allows modem to respond arbitrary...CVE-2019-105389.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 morePossible use after free issue due to improper input validation in volume listener library in...CVE-2019-105017.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, qca8081 firmware +22 more +24 moreFirmware is getting into loop of overwriting memory when scan command is given from host because...CVE-2019-23467.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +36 more +38 moreimproper input validation in allocation request for secure allocations can lead to page fault. in...CVE-2019-23305.5 Medium
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +22 more +24 morePossible race condition that will cause a use-after-free when writing to two sysfs entries at...CVE-2019-23147.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreProtection is missing while accessing md sessions info via macro which can lead to use-after-free...CVE-2019-22987.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreImproper validation for inputs received from firmware can lead to an out of bound write issue in...CVE-2019-22879.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs405 firmware +26 more +28 moreOut of bound read can happen due to lack of NULL termination on user controlled data in WLAN in...CVE-2019-22777.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9650 firmware +22 more +24 morePossible buffer overflow while processing the high level lim process action frame due to improper...CVE-2019-22699.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreA race condition occurs while processing perf-event which can lead to a use after free condition...CVE-2019-22607.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreAn unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto,...CVE-2018-120055.5 Medium