Skip to contentQualcomm Mdm9640 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8064 firmware, mdm9150 firmware +40 more +42 moreThe txrx stats req might be double freed in the pdev detach when the host driver is unloading in...CVE-2018-119475.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +31 more +33 moreFailure to initialize the reserved memory which is sent to the firmware might lead to exposure of...CVE-2018-119425.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreUse after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,...CVE-2018-119397.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 morePossible out of bounds write due to improper input validation while processing DO_ACS vendor...CVE-2018-119347.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreLack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto,...CVE-2018-119297.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +18 more +20 moreUse after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,...CVE-2018-118197.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 moreKernel can inject faults in computations during the execution of TrustZone leading to information...CVE-2017-82525.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +36 more +38 morePossibility of double free issue while running multiple instances of smp2p test because of proper...CVE-2019-22477.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreUnchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon...CVE-2018-138869.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreAn unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto,...CVE-2018-120055.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 moreImproper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon...CVE-2018-119687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreSignature verification of the skel library could potentially be disabled as the memory region on...CVE-2018-119677.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreWhile processing ssid IE length from remote AP, possible out-of-bounds access may occur due to...CVE-2018-119539.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +25 more +27 moreFailure to initialize the extra buffer can lead to an out of buffer access in WLAN function in...CVE-2018-119499.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreLack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon...CVE-2018-119409.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreLack of input validation before copying can lead to a buffer over read in WLAN function in...CVE-2018-119379.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIndex of array is processed in a wrong way inside a while loop and result in invalid index (-1 or...CVE-2018-119369.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreImproper input validation on input data which is used to locate and copy the additional IEs in...CVE-2018-119309.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +40 more +42 moreLack of check on length parameter may cause buffer overflow while processing WMI commands in...CVE-2018-119287.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 moreImproper input validation on input which is used as an array index will lead to an out of bounds...CVE-2018-119277.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +26 more +28 moreData length received from firmware is not validated against the max allowed size which can result...CVE-2018-119257.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreImproper buffer length validation in WLAN function can lead to a potential integer oveflow issue...CVE-2018-119247.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +26 more +28 moreImproper buffer length check before copying can lead to integer overflow and then a buffer...CVE-2018-119237.8 High
- qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 moreLack of check of buffer length before copying can lead to buffer overflow in camera module in...CVE-2017-182797.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreUndefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,...CVE-2018-119667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9615 firmware +28 more +30 moreImproperly configured memory protection allows read/write access to modem image from HLOS kernel...CVE-2018-58397.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...CVE-2018-139137.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreArbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon...CVE-2018-139125.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreUse-after-free vulnerability will occur as there is no protection for the route table`s rule in...CVE-2018-139007.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreImproper input validation in wireless service messaging module for data received from broadcast...CVE-2018-119459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreUse of non-time constant memcmp function creates side channel that leaks information and leads to...CVE-2018-118205.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...CVE-2018-118997.8 High
- qualcomm mdm9607 firmware, mdm9640 firmware, mdm9650 firmware +19 more +21 moreException in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon...CVE-2018-59159.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 moreLack of check of input size can make device memory get corrupted because of buffer overflow in...CVE-2018-112798.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...CVE-2017-183325.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...CVE-2017-183307.8 High
- qualcomm mdm9615 firmware, mdm9625 firmware, mdm9635m firmware +35 more +37 morePossible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon...CVE-2017-183297.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +22 more +24 moreUse after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions...CVE-2017-183287.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...CVE-2017-183275.5 Medium
- qualcomm mdm9607 firmware, mdm9615 firmware, mdm9625 firmware +32 more +34 moreCryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear...CVE-2017-183265.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreCryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile,...CVE-2017-183235.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +29 more +31 moreCryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon...CVE-2017-183225.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreBuffer overread while decoding PDP modify request or network initiated secondary PDP activation...CVE-2018-59166.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +14 more +16 moreIn the device programmer target-side code for firehose, a string may not be properly NULL...CVE-2018-58777.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreBuffer overwrite can occur when the legacy rates count received from the host is not checked...CVE-2018-118707.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreLack of check on remaining length parameter When processing scan start command will lead to...CVE-2018-118507.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +41 more +43 moreLack of check on out of range of bssid parameter When processing scan start command will lead to...CVE-2018-118497.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreWhen a series of FDAL messages are sent to the modem, a Use After Free condition can occur in...CVE-2018-113057.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, mdm9635m firmware +33 more +35 moreXPU Master privilege escalation is possible due to improper access control of unused...CVE-2017-183117.8 High
- Show moreLoading…