Skip to contentQualcomm Mdm9150 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreBuffer over-read may occur when downloading a corrupted firmware file that has chunk length in...CVE-2019-105429.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 morePossible use after free issue due to race condition while attempting to mark the entry pages as...CVE-2019-10529Public exploit8.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreLack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer...CVE-2019-105247.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreDCI client which might be preemptively freed up might be accessed for transferring packets...CVE-2019-105155.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +46 more +48 morePayload size is not checked before using it as array index in audio in Snapdragon Auto,...CVE-2019-105127.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreOut of bound access while processing a non-standard IE measurement request with length crossing...CVE-2019-105059.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +45 more +47 moreADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon...CVE-2019-104917.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreNull pointer dereference can occur while parsing invalid chunks while playing the nonstandard...CVE-2019-104887.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreBuffer overflow when the audio buffer size provided by user is larger than the maximum allowable...CVE-2019-23417.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 moreBuffer overflow due to improper validation of buffer size while IPA driver processing to perform...CVE-2019-23337.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 moreLack of input validation for data received from user space can lead to OOB access in WLAN in...CVE-2019-105087.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreLack of check of extscan change results received from firmware can lead to an out of buffer read...CVE-2019-105077.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 morePossible use after free issue due to improper input validation in volume listener library in...CVE-2019-105017.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreBuffer overflow scenario if the client sends more than 5 io_vec requests to the server in...CVE-2019-104987.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 moreUse after free issue occurs If another instance of open for voice_svc node has been called from...CVE-2019-104977.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreNull pointer dereferencing can happen when playing the clip with wrong block group id in...CVE-2019-23347.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +36 more +38 moreimproper input validation in allocation request for secure allocations can lead to page fault. in...CVE-2019-23305.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +43 more +45 morePossible buffer overflow when number of channels passed is more than size of channel mapping...CVE-2019-23287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 morePossible buffer overflow can occur when playing clip with incorrect element size in Snapdragon...CVE-2019-23279.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreData token is received from ADSP and is used without validation as an index into the array leads...CVE-2019-23267.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreBuffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto,...CVE-2019-23229.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreWhile storing calibrated data from firmware in cache, An integer overflow may occur since data...CVE-2019-23099.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +33 more +35 moreUser application could potentially make RPC call to the fastrpc driver and the driver will allow...CVE-2019-23087.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 morePossible integer underflow due to lack of validation before calculation of data length in 802.11...CVE-2019-23079.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper casting of structure while handling the buffer leads to out of bound read in display in...CVE-2019-23067.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreOut of bound access when reason code is extracted from frame data without validating the frame...CVE-2019-23059.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +38 more +40 moreAn out-of-bound write can be triggered by a specially-crafted command supplied by a userspace...CVE-2019-22997.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreProtection is missing while accessing md sessions info via macro which can lead to use-after-free...CVE-2019-22987.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 morePosition determination accuracy may be degraded due to wrongly decoded information in Snapdragon...CVE-2019-22549.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 moreBuffer over-read can occur while parsing an ogg file with a corrupted comment block. in...CVE-2019-22539.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreWhile rendering the layout background, Error status check is not caught properly and also...CVE-2019-22415.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +48 more +50 moreWhile sending the rendered surface content to the screen, Error handling is not properly checked...CVE-2019-22405.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreSanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of...CVE-2019-22395.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9650 firmware +29 more +31 moreOut of bound access can occur due to buffer copy without checking size of input received from...CVE-2019-22927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreImproper validation for inputs received from firmware can lead to an out of bound write issue in...CVE-2019-22879.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 moreShared memory gets updated with invalid data and may lead to access beyond the allocated memory....CVE-2019-22799.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9650 firmware +22 more +24 morePossible buffer overflow while processing the high level lim process action frame due to improper...CVE-2019-22699.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreUnauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to...CVE-2019-22615.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 moreA race condition occurs while processing perf-event which can lead to a use after free condition...CVE-2019-22607.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +54 more +56 moreLack of check to prevent the buffer length taking negative values can lead to stack overflow. in...CVE-2018-139249.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +22 more +24 moreWrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto,...CVE-2019-22577.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 moreA non-time constant function memcmp is used which creates a side channel that could leak...CVE-2018-59137.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +18 more +20 moreBuffer overflow in WLAN function due to improper check of buffer size before copying in...CVE-2018-59117.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreUse-after-free vulnerability will occur if reset of the routing table encounters an invalid rule...CVE-2018-139197.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in...CVE-2018-139119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 moreTruncated access authentication token leads to weakened access control for stored secure...CVE-2018-139087.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 moreWhile deserializing any key blob during key operations, buffer overflow could occur, exposing...CVE-2018-139075.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 moreThe HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis...CVE-2018-139069.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access due to improper array index validation may lead to...CVE-2018-139027.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreOut-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon...CVE-2018-138989.8 Critical
- Show moreLoading…