Qualcomm Sd 415 Firmware vulnerabilities

• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 more Buffer Over-read in IPA CVE-2018-5852 8.4 HighNovember 26, 2024
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 more Improper Authentication in TrustZone CVE-2018-11952 7.8 HighNovember 26, 2024
• qualcomm msm8909w firmware, msm8996au firmware, sd 205 firmware +25 more +27 more Use of Out-of-range Pointer Offset in Video CVE-2017-11076 8.8 HighNovember 26, 2024
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 more Permissions, Privileges, and Access Controls in Data CVE-2017-9711 6.7 MediumNovember 22, 2024
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Memory corruption while accessing the memory as payload size is not validated before access in... CVE-2019-2332 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Possible Integer overflow because of subtracting two integers without checking if the result... CVE-2019-2331 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Out of boundary access due to token received from ADSP and is used without validation as an index... CVE-2019-2325 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 more When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the... CVE-2019-2324 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +48 more +50 more Improper validation of array index causes OOB write and then leads to memory corruption in MMCP... CVE-2019-2258 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Possible use after free issue due to race condition while attempting to mark the entry pages as... CVE-2019-10529 Public exploit 8.1 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon... CVE-2019-10522 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +46 more +48 more Payload size is not checked before using it as array index in audio in Snapdragon Auto,... CVE-2019-10512 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Out of bound access while processing a non-standard IE measurement request with length crossing... CVE-2019-10505 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +45 more +47 more ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon... CVE-2019-10491 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard... CVE-2019-10488 7.5 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable... CVE-2019-2341 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 more Lack of input validation for data received from user space can lead to OOB access in WLAN in... CVE-2019-10508 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in... CVE-2019-10498 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 more Use after free issue occurs If another instance of open for voice_svc node has been called from... CVE-2019-10497 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto... CVE-2019-10489 7.5 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Null pointer dereferencing can happen when playing the clip with wrong block group id in... CVE-2019-2334 7.5 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +43 more +45 more Possible buffer overflow when number of channels passed is more than size of channel mapping... CVE-2019-2328 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon... CVE-2019-2327 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto,... CVE-2019-2322 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Improper casting of structure while handling the buffer leads to out of bound read in display in... CVE-2019-2306 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 more Buffer overflow can occur in display function due to lack of validation of header block size set... CVE-2019-2272 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 more Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon... CVE-2019-2254 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 more Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in... CVE-2019-2253 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 more Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of... CVE-2019-2239 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +27 more +29 more Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an... CVE-2018-13897 7.5 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +36 more +38 more Possible buffer overflow at the end of iterating loop while getting the version info and lead to... CVE-2019-2243 5.5 MediumJuly 22, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +54 more +56 more Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in... CVE-2018-13924 9.8 CriticalJuly 22, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +22 more +24 more Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto,... CVE-2019-2257 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 more A non-time constant function memcmp is used which creates a side channel that could leak... CVE-2018-5913 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Out of bounds read occurs due to improper validation of array while processing VDEV stop response... CVE-2018-5903 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 more Truncated access authentication token leads to weakened access control for stored secure... CVE-2018-13908 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 more While deserializing any key blob during key operations, buffer overflow could occur, exposing... CVE-2018-13907 5.3 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 more The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis... CVE-2018-13906 9.1 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can... CVE-2018-13901 5.5 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +46 more +48 more Lack of check on length of reason-code fetched from payload may lead driver access the memory not... CVE-2018-11955 9.8 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 more Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,... CVE-2018-11939 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 more Kernel can inject faults in computations during the execution of TrustZone leading to information... CVE-2017-8252 5.5 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm 215 firmware, mdm9150 firmware +31 more +33 more Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size... CVE-2019-2248 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +36 more +38 more Possibility of double free issue while running multiple instances of smp2p test because of proper... CVE-2019-2247 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 more Possible integer underflow can happen when calculating length of elementary stream map from... CVE-2019-2245 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearable, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 more Possible integer underflow can happen when calculating length of elementary stream info from... CVE-2019-2244 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Error in parsing PMT table frees the memory allocated for the map section but does not reset the... CVE-2018-13925 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +35 more +37 more Due to the missing permissions on several content providers of the RCS app in its android... CVE-2018-13895 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 more Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon... CVE-2018-13886 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 more Improper authentication in locked memory region can lead to unprivilged access to the memory in... CVE-2018-12013 7.8 HighMay 24, 2019
• Show olderLoading…