Skip to contentQualcomm Msm8996au vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreData truncation during higher to lower type conversion which causes less memory allocation than...CVE-2018-112897.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...CVE-2018-118997.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 moreUnauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from...CVE-2018-118887.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +15 more +17 moreIf an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer...CVE-2018-118557.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 moreMalicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory...CVE-2018-118477.8 High
- qualcomm mdm9607 firmware, mdm9640 firmware, mdm9650 firmware +19 more +21 moreException in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon...CVE-2018-59159.8 Critical
- qualcomm msm8996au firmware, sd 425 firmware, sd 430 firmware +14 more +16 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and...CVE-2018-58687.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,...CVE-2018-58677.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +22 more +24 moreAnti-rollback can be bypassed in replay scenario during app loading due to improper error...CVE-2018-35955.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +19 more +21 moreImproper input validation in trustzone can lead to denial of service in snapdragon automobile,...CVE-2018-119995.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 morePossible undefined behavior due to lack of size check in function for parameter segment_idx can...CVE-2018-112887.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 moreLack of check of input size can make device memory get corrupted because of buffer overflow in...CVE-2018-112798.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 moreImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile...CVE-2017-82767.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...CVE-2017-183325.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +9 more +11 moreImproper access control on secure display buffers in snapdragon automobile, snapdragon mobile and...CVE-2017-183317.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...CVE-2017-183307.8 High
- qualcomm mdm9615 firmware, mdm9625 firmware, mdm9635m firmware +35 more +37 morePossible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon...CVE-2017-183297.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...CVE-2017-183275.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreCryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile,...CVE-2017-183235.5 Medium
- qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 moreQSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in...CVE-2017-183207.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +32 more +34 moreWhen a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure...CVE-2017-181417.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +35 more +37 moreA non-secure user may be able to access certain registers in snapdragon automobile, snapdragon...CVE-2017-110045.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +28 more +30 morePossible buffer overflow in DRM Trusted application due to lack of check function return values...CVE-2018-59187.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 425 firmware +12 more +14 morePossible buffer overflow in OEM crypto function due to improper input validation in Snapdragon...CVE-2018-59177.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreBuffer overread while decoding PDP modify request or network initiated secondary PDP activation...CVE-2018-59166.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 450 firmware +7 more +9 morePotential buffer overflow in Video due to lack of input validation in input and output values in...CVE-2018-59127.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +14 more +16 moreIn the device programmer target-side code for firehose, a string may not be properly NULL...CVE-2018-58777.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +14 more +16 moreWhen a malformed command is sent to the device programmer, an out-of-bounds access can occur in...CVE-2018-119967.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSMMU secure camera logic allows secure camera controllers to access HLOS memory during session in...CVE-2018-119947.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...CVE-2018-119217.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 morePossible buffer overflow in Ontario fingerprint code due to lack of input validation for the...CVE-2018-112647.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +10 more +12 moreMissing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in...CVE-2017-183189.8 Critical
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +3 more +5 moreRestrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system...CVE-2017-183177.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSecure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon...CVE-2017-183167.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreBuffer overwrite can occur when the legacy rates count received from the host is not checked...CVE-2018-118707.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +9 more +11 moreThere is improper access control of the SSC and GPU mapped regions which lead to inject code from...CVE-2018-35887.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreLack of check on remaining length parameter When processing scan start command will lead to...CVE-2018-118507.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +41 more +43 moreLack of check on out of range of bssid parameter When processing scan start command will lead to...CVE-2018-118497.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreWhen a series of FDAL messages are sent to the modem, a Use After Free condition can occur in...CVE-2018-113057.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, mdm9635m firmware +33 more +35 moreXPU Master privilege escalation is possible due to improper access control of unused...CVE-2017-183117.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm msm8909w firmware, msm8996au firmware +29 more +31 moreClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon...CVE-2017-183107.8 High
- qualcomm, inc. small cell soc, snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, ipq4019 firmware +34 more +36 moreDuring secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell...CVE-2017-181247.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +7 more +9 moreWhile accessing SafeSwitch services, third party can manipulate a given device and perform...CVE-2017-183127.8 High
- qaulcomm fsm9055 firmware, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreInsufficient memory allocation in boot due to incorrect size being passed could result in out of...CVE-2017-183047.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreWhile processing the sensors registry configuration file, if inputs are not validated a buffer...CVE-2017-183037.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 moreImproper translation table consolidation logic leads to resource exhaustion and QSEE error in...CVE-2017-182995.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +24 more +26 moreLack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile,...CVE-2017-182987.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreAccess control on applications is not applied while accessing SafeSwitch services can lead to...CVE-2017-182967.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +17 more +19 morePossible buffer overflow if input is not null terminated in DSP Service module in Snapdragon...CVE-2017-182957.8 High
- Show moreLoading…