Qualcomm Sd 412 Firmware vulnerabilities

• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9205 firmware +41 more +43 more While deserializing any key blob during key operations, buffer overflow could occur exposing... CVE-2019-2275 5.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9205 firmware, mdm9206 firmware +45 more +47 more Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap... CVE-2019-2294 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 more While rendering the layout background, Error status check is not caught properly and also... CVE-2019-2241 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 more Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of... CVE-2019-2239 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 more Lack of check of data type can lead to subsequent loop-expression potentially go negative and the... CVE-2019-2238 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 more Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails... CVE-2019-2237 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +36 more +38 more Null pointer dereference during secure application termination using specific application ids. in... CVE-2019-2236 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +33 more +35 more Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA... CVE-2019-2235 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 more Debug policy with invalid signature can be loaded when the debug policy functionality is disabled... CVE-2018-13927 7.8 HighJuly 22, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +34 more +36 more XBL_SEC image authentication and other crypto related validations are accessible to a compromised... CVE-2018-13896 7.8 HighJuly 22, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 more A non-time constant function memcmp is used which creates a side channel that could leak... CVE-2018-5913 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 more Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon... CVE-2018-13910 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing... CVE-2018-13909 7.0 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 more Truncated access authentication token leads to weakened access control for stored secure... CVE-2018-13908 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 more While deserializing any key blob during key operations, buffer overflow could occur, exposing... CVE-2018-13907 5.3 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 more The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis... CVE-2018-13906 9.1 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon... CVE-2018-13898 9.8 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 more Kernel can inject faults in computations during the execution of TrustZone leading to information... CVE-2017-8252 5.5 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 more Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon... CVE-2018-13886 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 more Improper authentication in locked memory region can lead to unprivilged access to the memory in... CVE-2018-12013 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 more While updating blacklisting region shared buffered memory region is not validated against newly... CVE-2018-12012 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 more Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute... CVE-2018-12004 5.5 MediumMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 more ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto,... CVE-2018-11976 5.5 MediumMay 24, 2019
• qualcomm technologies, inc. snapdragon mobile, qualcomm sd 410 firmware, sd 412 firmware +14 more +16 more When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in... CVE-2017-15841 5.5 MediumMay 6, 2019
• qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 more In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,... CVE-2017-18131 7.8 HighMay 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile,, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 more Interrupt exit code flow may undermine access control policy set forth by secure world can lead... CVE-2018-11971 5.5 MediumApril 4, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 more TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute,... CVE-2018-11970 7.8 HighApril 4, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad... CVE-2018-11958 5.5 MediumApril 4, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +6 more +8 more Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto... CVE-2018-11830 7.8 HighApril 4, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs605 firmware +28 more +30 more Exceeding the limit of usage entries are not tracked and the information will be lost causing the... CVE-2018-11948 5.5 MediumFebruary 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto,... CVE-2018-11931 7.8 HighFebruary 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 more Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon... CVE-2018-11864 5.5 MediumFebruary 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Usage of non-time-constant comparison functions can lead to information leakage through side... CVE-2018-11845 5.5 MediumFebruary 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 more Use of non-time constant memcmp function creates side channel that leaks information and leads to... CVE-2018-11820 5.5 MediumFebruary 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 more Data truncation during higher to lower type conversion which causes less memory allocation than... CVE-2018-11289 7.8 HighFebruary 25, 2019
• qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 more Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from... CVE-2018-11888 7.8 HighFebruary 11, 2019
• qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +15 more +17 more If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer... CVE-2018-11855 7.8 HighFebruary 11, 2019
• qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 more Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory... CVE-2018-11847 7.8 HighFebruary 11, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, msm8909w firmware +11 more +13 more Improper input validation in the QTEE keymaster app can lead to invalid memory access in... CVE-2018-5869 7.8 HighJanuary 18, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 more Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,... CVE-2018-5867 7.8 HighJanuary 18, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +19 more +21 more Improper input validation in trustzone can lead to denial of service in snapdragon automobile,... CVE-2018-11999 5.5 MediumJanuary 18, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 more Possible undefined behavior due to lack of size check in function for parameter segment_idx can... CVE-2018-11288 7.8 HighJanuary 18, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 more Lack of check of input size can make device memory get corrupted because of buffer overflow in... CVE-2018-11279 8.8 HighJanuary 18, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 more Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile... CVE-2017-8276 7.8 HighJanuary 18, 2019
• qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 more Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon... CVE-2017-18330 7.8 HighJanuary 3, 2019
• qualcomm mdm9607 firmware, mdm9615 firmware, mdm9625 firmware +32 more +34 more Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear... CVE-2017-18326 5.5 MediumJanuary 3, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +30 more +32 more Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon... CVE-2017-18324 5.5 MediumJanuary 3, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 more Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile,... CVE-2017-18323 5.5 MediumJanuary 3, 2019
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +29 more +31 more Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon... CVE-2017-18322 5.5 MediumJanuary 3, 2019
• qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 more QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in... CVE-2017-18320 7.8 HighJanuary 3, 2019
• Show olderLoading…