Skip to contentQualcomm, Inc. Snapdragon Compute vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 moreMemory failure in content protection module due to not having pointer within the scope in...CVE-2019-141247.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 morePossible buffer overflow and over read possible due to missing bounds checks for fixed limits if...CVE-2019-141237.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096 firmware +55 more +57 moreOut of bounds read can happen in diag event set mask command handler when user provided length in...CVE-2019-141017.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9207c firmware +7 more +9 moreRegister write via debugfs is disabled by default to prevent register writing via debugfs. in...CVE-2019-141007.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +26 more +28 moreDevice misbehavior may be observed when incorrect offset, length or number of buffers is passed...CVE-2019-140997.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +29 more +31 moreClose and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon...CVE-2019-140377.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8096au firmware +16 more +18 morePossible out of bounds read due to a missing bounds check and could lead to local information...CVE-2020-3700Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 morePossible out of bound access while processing assoc response from host due to improper length...CVE-2020-3699Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreOut of bound write while QoS DSCP mapping due to improper input validation for data received from...CVE-2020-3698Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9607 firmware, msm8909w firmware +11 more +13 moreWhen kernel thread unregistered listener, Use after free issue happened as the listener client`s...CVE-2019-10580Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +19 more +21 moreA possible buffer overflow would occur while processing command from firmware due to the group_id...CVE-2020-36657.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer over-write may occur during fetching track decoder specific information if cb size exceeds...CVE-2020-36639.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +31 more +33 moreBuffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard...CVE-2020-36629.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which...CVE-2020-36619.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 morePossible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table...CVE-2020-36609.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 morePossible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table...CVE-2020-36589.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +32 more +34 moreStack based overflow If the maximum number of arguments allowed per request in perflock exceeds...CVE-2020-36357.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +34 more +36 moreAny application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice...CVE-2020-36267.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossible buffer overflow while copying the frame to local buffer due to lack of check of length...CVE-2020-36149.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon mobile, snapdragon voice & music, qualcomm sm8150 firmware +1 moreDouble free issue in kernel memory mapping due to lack of memory protection mechanism in...CVE-2020-3613Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +62 more +64 moreInteger overflow in diag command handler when user inputs a large value for number of tasks field...CVE-2019-140947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, qcs405 firmware +7 more +9 moreDouble free issue in NPU due to lack of resource locking mechanism to avoid race condition in...CVE-2019-140917.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +38 more +40 moreOut of bound write can happen due to lack of check of array index value while parsing SDP...CVE-2019-140809.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +30 more +32 moreBuffer overflow occurs while processing an subsample data length out of range due to lack of user...CVE-2019-140767.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +54 more +56 moreCopying RTCP messages into the output buffer without checking the destination buffer size which...CVE-2019-140739.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreBuffer overflows while decoding setup message from Network due to lack of check of IE message...CVE-2019-140629.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +13 more +15 moreWhile IPA driver processes route add rule IOCTL, there is no input validation of the rule ID...CVE-2019-140477.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +32 more +34 morePayload size is not validated before reading memory that may cause issue of accessing invalid...CVE-2019-106265.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +18 more +20 morekernel writes to user passed address without any checks can lead to arbitrary memory write in...CVE-2019-105977.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +16 more +18 moreA race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto,...CVE-2020-36807.0 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 moreFirmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response...CVE-2020-36457.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +36 more +38 moreInteger overflow may occur if atom size is less than atom offset as there is improper validation...CVE-2020-36419.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 moreArray out of bound may occur while playing mp3 file as no check is there on offset if it is...CVE-2020-36339.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 morePossibility of out of bound access while processing the responses from video firmware in...CVE-2020-36307.8 High
- qualcomm, inc. snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +3 more +5 moreNULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute...CVE-2020-36187.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +25 more +27 moreBuffer overflow in display function due to memory copy without checking length of size using...CVE-2020-36167.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8009 firmware, apq8053 firmware +23 more +25 moreValid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on...CVE-2020-36159.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 morePossibility of double free of the drawobj that is added to the drawqueue array of the context...CVE-2020-36107.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +8 more +10 moreOut of bound memory access while processing qpay due to not validating length of the response...CVE-2019-140787.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +34 more +36 moreOut of bound memory access while processing ese transmit command due to passing Response buffer...CVE-2019-140777.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreUsing non-time-constant functions like memcmp to compare sensitive data can lead to information...CVE-2019-140675.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +12 more +14 moreInteger overflow in calculating estimated output buffer size when getting a list of installed...CVE-2019-140667.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, msm8998 firmware +14 more +16 moreImproper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the...CVE-2019-140547.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +39 more +41 moreWhen attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user...CVE-2019-140537.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +28 more +30 moreOut of bound read in Fingerprint application due to requested data is being used without length...CVE-2019-140437.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +21 more +23 moreOut of bound read in in fingerprint application due to requested data assigned to a local buffer...CVE-2019-140427.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8098 firmware +20 more +22 moreOut of bound read in adm call back function due to incorrect boundary check for payload in...CVE-2019-140397.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +21 more +23 moreBuffer over-read in ADSP parse function due to lack of check for availability of sufficient data...CVE-2019-140387.1 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, qualcomm msm8998 firmware, qca6390 firmware +3 more +5 morePossible buffer over-read in windows wlan driver function due to lack of check of length of...CVE-2020-36539.1 Critical
- qualcomm, inc. snapdragon compute, snapdragon connectivity, qualcomm msm8998 firmware, qca6390 firmware +3 more +5 morePossible buffer over-read issue in windows x86 wlan driver function while processing beacon or...CVE-2020-36529.1 Critical
- Show moreLoading…