Skip to contentQualcomm Mdm9607 vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 moreImproper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon...CVE-2018-119687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreSignature verification of the skel library could potentially be disabled as the memory region on...CVE-2018-119677.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreWhile processing ssid IE length from remote AP, possible out-of-bounds access may occur due to...CVE-2018-119539.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +25 more +27 moreFailure to initialize the extra buffer can lead to an out of buffer access in WLAN function in...CVE-2018-119499.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreLack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon...CVE-2018-119409.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreLack of input validation before copying can lead to a buffer over read in WLAN function in...CVE-2018-119379.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIndex of array is processed in a wrong way inside a while loop and result in invalid index (-1 or...CVE-2018-119369.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreImproper input validation on input data which is used to locate and copy the additional IEs in...CVE-2018-119309.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +40 more +42 moreLack of check on length parameter may cause buffer overflow while processing WMI commands in...CVE-2018-119287.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 moreImproper input validation on input which is used as an array index will lead to an out of bounds...CVE-2018-119277.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +26 more +28 moreData length received from firmware is not validated against the max allowed size which can result...CVE-2018-119257.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreImproper buffer length validation in WLAN function can lead to a potential integer oveflow issue...CVE-2018-119247.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreImproper authentication can happen on Remote command handling due to inappropriate handling of...CVE-2018-112719.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +26 more +28 moreImproper buffer length check before copying can lead to integer overflow and then a buffer...CVE-2018-119237.8 High
- qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 moreLack of check of buffer length before copying can lead to buffer overflow in camera module in...CVE-2017-182797.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 moreAn integer underflow may occur due to lack of check when received data length from...CVE-2017-182787.8 High
- qualcomm technologies, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +7 more +9 moreSecure camera logic allows display/secure camera controllers to access HLOS memory during secure...CVE-2017-182767.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreA new account can be inserted into simContacts service using Android command line tool in...CVE-2017-182755.5 Medium
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile iterating through the models contained in a fixed-size array in the actData structure,...CVE-2017-182747.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreA Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon...CVE-2017-181577.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +10 more +12 moreWhile processing camera buffers in camera driver, a use after free condition can occur in...CVE-2017-181567.8 High
- qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,...CVE-2017-181317.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables,, qualcomm mdm9150 firmware, mdm9206 firmware +23 more +25 morekernel could return a received message length higher than expected, which leads to buffer...CVE-2018-139187.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile,, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreInterrupt exit code flow may undermine access control policy set forth by secure world can lead...CVE-2018-119715.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 moreTZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute,...CVE-2018-119707.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreUndefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,...CVE-2018-119667.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreInsufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad...CVE-2018-119585.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +6 more +8 moreImproper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto...CVE-2018-118307.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreLack of input validation for data received from user space can lead to an out of bound array...CVE-2018-139147.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...CVE-2018-139137.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreArbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon...CVE-2018-139125.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +18 more +20 moreKGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free...CVE-2018-139057.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +11 more +13 moreImproper input validation in SCM handler to access storage in TZ can lead to unauthorized access...CVE-2018-139049.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreUse-after-free vulnerability will occur as there is no protection for the route table`s rule in...CVE-2018-139007.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreImproper input validation in wireless service messaging module for data received from broadcast...CVE-2018-119459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +43 more +45 moreImproper input validation for argument received from HLOS can lead to buffer overflows and...CVE-2018-119387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9607 firmware, mdm9650 firmware +26 more +28 moreImproper input validation might result in incorrect app id returned to the caller Instead of...CVE-2018-119355.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto,...CVE-2018-119317.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreBytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon...CVE-2018-118645.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreUsage of non-time-constant comparison functions can lead to information leakage through side...CVE-2018-118455.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreUse of non-time constant memcmp function creates side channel that leaks information and leads to...CVE-2018-118205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreData truncation during higher to lower type conversion which causes less memory allocation than...CVE-2018-112897.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +30 more +32 moreThere is potential for memory corruption in the RIL daemon due to de reference of memory outside...CVE-2018-138887.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...CVE-2018-118997.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 moreUnauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from...CVE-2018-118887.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +15 more +17 moreIf an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer...CVE-2018-118557.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 moreMalicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory...CVE-2018-118477.8 High
- qualcomm mdm9607 firmware, mdm9640 firmware, mdm9650 firmware +19 more +21 moreException in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon...CVE-2018-59159.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper validation of buffer length checks in the lwm2m device management protocol can leads to...CVE-2018-58818.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper data length check while processing an event report indication can lead to a buffer...CVE-2018-58807.8 High
- Show moreLoading…