Qualcomm Qcs404 vulnerabilities

• qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 more Buffer overflow in sahara protocol while processing commands leads to overwrite of secure... CVE-2021-30327 Public exploit 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +44 more +46 more u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0)... CVE-2020-3704 7.5 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8076 firmware +39 more +41 more u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode... CVE-2020-3703 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +27 more +29 more u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the... CVE-2020-3690 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 more u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents... CVE-2020-3684 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, kamorta firmware +7 more +9 more u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a... CVE-2020-3678 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +14 more +16 more u'An Unaligned address or size can propagate to the database due to improper page permissions and... CVE-2020-3638 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm qca6390 firmware, qcn7605 firmware +6 more +8 more u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap... CVE-2020-11156 8.1 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 more u'Array index underflow issue in adsp driver due to improper check of channel id before used as... CVE-2020-11174 Fix available 7.8 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8053 firmware +31 more +33 more u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver... CVE-2020-11173 Fix available 7.0 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 more u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events... CVE-2020-11162 Fix available 7.8 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 more u'Out of bound access can happen in MHI command process due to lack of check of channel id value... CVE-2020-11125 Fix available 7.8 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +15 more +17 more u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code... CVE-2020-3679 5.5 MediumSeptember 9, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq5018 firmware, ipq6018 firmware +17 more +19 more u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as... CVE-2020-3675 9.8 CriticalSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 more u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset'... CVE-2020-3669 9.8 CriticalSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 more u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than... CVE-2020-3668 9.8 CriticalSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 more u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating... CVE-2020-3667 9.8 CriticalSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon... CVE-2020-3666 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 more u'Information disclosure issue occurs as in current logic Secure Touch session is released... CVE-2020-3644 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 more u'Information disclosure issue can occur due to partial secure display-touch session tear-down'... CVE-2020-3643 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +10 more +12 more u'Resizing the usage table header before passing all the checks leads to the function exiting... CVE-2020-3640 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +8 more +10 more u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated... CVE-2020-3636 7.8 HighSeptember 8, 2020
• qualcomm apq8009, apq8017, apq8053 +128 more +130 more u'Channel name string which has been read from shared memory is potentially subjected to string... CVE-2020-3622 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more u'Lack of check to ensure that the TX read index & RX write index that are read from shared... CVE-2020-3621 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more u'Lack of check of integer overflow while doing a round up operation for data read from shared... CVE-2020-3620 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 more u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to... CVE-2020-3619 7.0 HighSeptember 8, 2020
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, kamorta firmware +13 more +15 more u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access... CVE-2020-3611 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +23 more +25 more u'While processing SMCInvoke asynchronous message header, message count is modified leading to a... CVE-2019-14119 7.0 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 more u'Information disclosure issue occurs as in current logic as secure touch is released without... CVE-2019-14115 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, nicobar firmware +13 more +15 more u'Keymaster attestation key and device IDs provisioning which is a one time process is... CVE-2019-14089 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +68 more +70 more u'Heap overflow in diag command handler due to lack of check of packet length received from user'... CVE-2019-14074 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +35 more +37 more u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in... CVE-2019-14065 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +27 more +29 more u'Possible integer overflow in API due to lack of check on large oid range count in cert... CVE-2019-14056 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +8 more +10 more u'When a new session is created, Object is returned that contains TZ addresses and it get passed... CVE-2019-14025 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +62 more +64 more u'Lack of check for integer overflow for round up and addition operations result into memory... CVE-2019-13999 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less... CVE-2019-13998 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of integer overflow check for addition of fragment size and remaining size that are read... CVE-2019-13995 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of check that the current received data fragment size of a particular packet that are read... CVE-2019-13994 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, ipq6018 firmware +29 more +31 more u'Out of bound memory access if stack push and pop operation are performed without doing a bound... CVE-2019-13992 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, ipq6018 firmware +29 more +31 more u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in... CVE-2019-10629 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, bitra firmware +34 more +36 more u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in... CVE-2019-10628 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 more u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of... CVE-2019-10615 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +26 more +28 more u'Improper authentication and signature verification of debug polices in secure boot loader will... CVE-2019-10562 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +15 more +17 more u'Possible use-after-free while accessing diag client map table since list can be reallocated due... CVE-2020-11124 Fix available 7.8 HighSeptember 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +67 more +69 more u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access... CVE-2019-10527 Fix available 7.8 HighSeptember 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 more Memory corruption can occurs in trusted application if offset size from HLOS is more than actual... CVE-2019-14130 7.8 HighJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 more Memory failure in content protection module due to not having pointer within the scope in... CVE-2019-14124 7.8 HighJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +7 more +9 more Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if... CVE-2019-14123 7.8 HighJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096 firmware +55 more +57 more Out of bounds read can happen in diag event set mask command handler when user provided length in... CVE-2019-14101 7.1 HighJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +62 more +64 more Integer overflow in diag command handler when user inputs a large value for number of tasks field... CVE-2019-14094 7.8 HighJune 22, 2020
• Show olderLoading…