Skip to contentQualcomm Mdm9640 vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +63 more +65 moreBuffer overflow occurs while processing LMP packet in which name length parameter exceeds value...CVE-2019-140959.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +18 more +20 moreAccess to the uninitialized variable when the driver tries to unmap the dma buffer of a request...CVE-2019-14079Public exploit7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +32 more +34 moreMemory use after free issue in audio due to lack of resource control in Snapdragon Auto,...CVE-2019-140327.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than...CVE-2019-140319.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto,...CVE-2019-140287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 morePossible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data...CVE-2019-140267.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreLack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO...CVE-2019-140007.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +26 more +28 morePossibility of heap-buffer-overflow during last iteration of loop while populating image version...CVE-2019-106047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +16 more +18 moreUse after free issue occurs If the real device interface goes down and a route lookup is...CVE-2019-106037.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreStack overflow can occur when SDP is received with multiple payload types in the FMTP attribute...CVE-2019-105949.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow can occur when processing non standard SDP video Image attribute parameter in a...CVE-2019-105939.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 morePossible Stack overflow can occur when processing a large SDP body or non standard SDP body...CVE-2019-105879.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreFilling media attribute tag names without validating the destination buffer size which can result...CVE-2019-105869.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreImproper input validation while processing SIP URI received from the network will lead to buffer...CVE-2019-105779.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon mobile, qualcomm apq8053 firmware, apq8098 firmware +16 more +18 moreStack buffer overflow due to instance id is misplaced inside definition of hardware accelerated...CVE-2019-105697.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreMultiple Read overflows issue due to improper length check while decoding Identity Request in...CVE-2019-105549.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreMultiple Read overflows due to improper length checks while decoding authentication in Cs domain...CVE-2019-105539.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreMultiple Buffer Over-read issue can happen due to improper length checks while decoding Service...CVE-2019-105529.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +38 more +40 moreBuffer Over-read when UE is trying to process the message received form the network without zero...CVE-2019-105509.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8096 firmware, apq8096au firmware +35 more +37 moreBuffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during...CVE-2019-105469.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +28 more +30 moreOut of bound write in WLAN driver due to NULL character not properly placed after SSID name in...CVE-2019-105269.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, mdm9640 firmware +4 more +6 morePossible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon...CVE-2018-118387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 morePossibility of use-after-free and double free because of not marking buffer as NULL after freeing...CVE-2019-140557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +19 more +21 moreStage-2 fault will occur while writing to an ION system allocation which has been assigned to non...CVE-2019-140497.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreDuring listener modified response processing, a buffer overrun occurs due to lack of buffer size...CVE-2019-14041Public exploit7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreUsing memory after being freed in qsee due to wrong implementation can lead to unexpected...CVE-2019-14040Public exploit7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064 firmware, apq8096au firmware +8 more +10 morePossible buffer overflow issue in error processing due to improper validation of array index...CVE-2019-140367.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 morePossible integer overflow happens when mmap find function will increment refcount every time when...CVE-2019-105857.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreWhile transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data...CVE-2019-105587.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8016 firmware +46 more +48 moreDevice memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto,...CVE-2019-22429.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 moreOut of boundary access is possible as there is no validation of data accessed against the...CVE-2019-106149.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +37 more +39 moreOut of bounds memcpy can occur by providing the embedded NULL character string and length greater...CVE-2019-106077.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +28 more +30 morePossible buffer overwrite in message handler due to lack of validation of tid value calculated...CVE-2019-105957.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 morePossibility of out of bound access in debug queue, if packet size field is corrupted in...CVE-2019-105847.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreImproper check in video driver while processing data from video firmware can lead to integer...CVE-2019-105729.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreImproper length check on source buffer to handle userspace data received can lead to out-of-bound...CVE-2019-105447.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 morePotential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from...CVE-2019-105367.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overflow during SIB read when network configures complete sib list along with first and...CVE-2019-105259.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +47 more +49 moreUse after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in...CVE-2019-105187.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreMultiple read overflows in MM while decoding service accept,service reject,attach reject and MT...CVE-2019-105169.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreWhile processing MT Secondary PDP request, Buffer overflow will happen due to incorrect...CVE-2019-105009.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreBuffer over read can happen while parsing SMS OTA messages at transport layer if network sends un...CVE-2019-104879.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreOut of bound write can happen in WMI firmware event handler due to lack of validation of data...CVE-2019-104807.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +27 more +29 moreWhen a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in...CVE-2018-119807.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +46 more +48 moreWhile Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more...CVE-2019-23377.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 morePossible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in...CVE-2019-23209.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +33 more +35 moreOut of bound read would occur while trying to read action category and action ID without...CVE-2019-23107.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +38 more +40 moreBuffer overflow can occur due to usage of wrong datatype and missing length check before copying...CVE-2019-105557.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreLack of check of data truncation on user supplied data in kernel leads to buffer overflow in...CVE-2019-105307.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto,...CVE-2019-105119.8 Critical
- Show moreLoading…