Skip to contentQualcomm Qcs610 vulnerabilities
- qualcomm apq8009, apq8017, apq8053 +128 more +130 moreu'Channel name string which has been read from shared memory is potentially subjected to string...CVE-2020-36227.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check to ensure that the TX read index & RX write index that are read from shared...CVE-2020-36215.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check of integer overflow while doing a round up operation for data read from shared...CVE-2020-36205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreu'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to...CVE-2020-36197.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 moreu'Possible out of bound access while copying the mask file content into the buffer without...CVE-2020-111287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +23 more +25 moreu'While processing SMCInvoke asynchronous message header, message count is modified leading to a...CVE-2019-141197.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Information disclosure issue occurs as in current logic as secure touch is released without...CVE-2019-141155.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, nicobar firmware +13 more +15 moreu'Keymaster attestation key and device IDs provisioning which is a one time process is...CVE-2019-140897.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +68 more +70 moreu'Heap overflow in diag command handler due to lack of check of packet length received from user'...CVE-2019-140747.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +35 more +37 moreu'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in...CVE-2019-140657.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +27 more +29 moreu'Possible integer overflow in API due to lack of check on large oid range count in cert...CVE-2019-140567.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreu'Accessing an uninitialized data structure could result in partially copying of contents and...CVE-2019-140529.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +8 more +10 moreu'When a new session is created, Object is returned that contains TZ addresses and it get passed...CVE-2019-140255.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +62 more +64 moreu'Lack of check for integer overflow for round up and addition operations result into memory...CVE-2019-139997.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less...CVE-2019-139987.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of integer overflow check for addition of fragment size and remaining size that are read...CVE-2019-139957.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of check that the current received data fragment size of a particular packet that are read...CVE-2019-139947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, ipq6018 firmware +29 more +31 moreu'Out of bound memory access if stack push and pop operation are performed without doing a bound...CVE-2019-139927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, ipq6018 firmware +29 more +31 moreu'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in...CVE-2019-106297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, bitra firmware +34 more +36 moreu'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in...CVE-2019-106287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of...CVE-2019-106157.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm bitra firmware, nicobar firmware +17 more +19 moreu'Improper access control can lead signed process to guess pid of other processes and access...CVE-2019-105967.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +26 more +28 moreu'Improper authentication and signature verification of debug polices in secure boot loader will...CVE-2019-105627.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +15 more +17 moreu'Possible use-after-free while accessing diag client map table since list can be reallocated due...CVE-2020-11124Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +67 more +69 moreu'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access...CVE-2019-10527Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreu'Information exposure issues while processing IE header due to improper check of beacon IE frame...CVE-2020-11118Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +47 more +49 moreu'Possible out of bound write while processing association response received from host due to...CVE-2020-11116Fix available9.8 Critical