Qualcomm Msm8939 vulnerabilities

• qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8009, apq8016 +84 more +86 more Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can... CVE-2020-11268 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +553 more +555 more Out of bound reads might occur in while processing Service descriptor due to improper validation... CVE-2020-11213 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8016 +539 more +541 more Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field... CVE-2020-11212 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +63 more +65 more Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value... CVE-2019-14095 9.8 CriticalMarch 5, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +30 more +32 more Unhandled paging request is observed due to dereferencing an already freed object because of race... CVE-2019-14072 7.0 HighMarch 5, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 more Null-pointer dereference can occur while accessing the segment element info when it is not... CVE-2019-14061 7.5 HighMarch 5, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 more Null pointer dereference can happen when parsing udta atom which is non-standard and having... CVE-2019-10591 7.5 HighMarch 5, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more Multiple Read overflows issue due to improper length check while decoding Identity Request in... CVE-2019-10554 9.1 CriticalMarch 5, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service... CVE-2019-10552 9.1 CriticalMarch 5, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 more Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer... CVE-2019-14057 9.1 CriticalFebruary 7, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 more Possibility of use-after-free and double free because of not marking buffer as NULL after freeing... CVE-2019-14055 7.8 HighFebruary 7, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 more Out of bound access while parsing dts atom, which is non-standard as it does not have valid... CVE-2019-10590 9.8 CriticalFebruary 7, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have... CVE-2019-14017 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 more Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto,... CVE-2019-14016 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 more While parsing invalid super index table, elements within super index table may exceed total chunk... CVE-2019-14013 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 more Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length... CVE-2019-14006 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 more Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size... CVE-2019-14005 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in... CVE-2019-14004 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed... CVE-2019-14003 7.5 HighJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 more Buffer overflow can occur while processing clip due to lack of check of object size before... CVE-2019-10611 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 more Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto,... CVE-2019-10579 9.1 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 more Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto... CVE-2019-10578 7.5 HighJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +32 more +34 more While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can... CVE-2019-10548 7.8 HighJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 more Null-pointer dereference issue can occur while calculating string length when source string... CVE-2019-10532 9.8 CriticalJanuary 21, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8016 firmware +46 more +48 more Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto,... CVE-2019-2242 9.8 CriticalDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +37 more +39 more Out of bounds memcpy can occur by providing the embedded NULL character string and length greater... CVE-2019-10607 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +12 more +14 more Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of... CVE-2019-10605 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 more Use of local variable as argument to netlink CB callback goes out of it scope when callback... CVE-2019-10600 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +28 more +30 more Possible buffer overwrite in message handler due to lack of validation of tid value calculated... CVE-2019-10595 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more Improper length check on source buffer to handle userspace data received can lead to out-of-bound... CVE-2019-10544 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 more Buffer overflow during SIB read when network configures complete sib list along with first and... CVE-2019-10525 9.8 CriticalDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +47 more +49 more Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in... CVE-2019-10518 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +31 more +33 more Memory is being freed up twice when two concurrent threads are executing in parallel in... CVE-2019-10517 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 more Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT... CVE-2019-10516 9.8 CriticalDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 more While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect... CVE-2019-10500 9.8 CriticalDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 more Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un... CVE-2019-10487 9.8 CriticalDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 more Out of bound write can happen in WMI firmware event handler due to lack of validation of data... CVE-2019-10480 7.8 HighDecember 18, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 more Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead... CVE-2019-2321 7.8 HighDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 more Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in... CVE-2019-2320 9.8 CriticalDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 more Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer... CVE-2019-10559 9.8 CriticalDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto,... CVE-2019-10511 9.8 CriticalDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +46 more +48 more Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon... CVE-2019-10493 9.8 CriticalDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto,... CVE-2019-10485 7.5 HighDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more SNDCP module may access array out side its boundary when it receives malformed XID message. in... CVE-2019-2303 9.8 CriticalNovember 21, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more Lack of integrity check allows MODEM to accept any NAS messages which can result into... CVE-2019-2289 9.8 CriticalNovember 21, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 more Buffer over read can happen while parsing downlink session management OTA messages if network... CVE-2019-2271 9.8 CriticalNovember 21, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 more Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a... CVE-2019-10490 5.5 MediumNovember 21, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +34 more +36 more Race condition due to the lack of resource lock which will be concurrently modified in the memcpy... CVE-2019-10486 7.0 HighNovember 21, 2019
• qualcomm, inc. snapdragon mobile, qualcomm msm8917 firmware, msm8939 firmware +4 more +6 more In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile... CVE-2014-10050 9.8 CriticalApril 18, 2018