Qualcomm Sd 435 Firmware vulnerabilities

• qualcomm 215 firmware, mdm9206 firmware, mdm9607 firmware +20 more +22 more Configurations in Android Build CVE-2018-11922 7.5 HighNovember 26, 2024
• qualcomm msm8909w firmware, msm8996au firmware, sd 205 firmware +25 more +27 more Use of Out-of-range Pointer Offset in Video CVE-2017-11076 8.8 HighNovember 26, 2024
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Memory corruption while accessing the memory as payload size is not validated before access in... CVE-2019-2332 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Possible Integer overflow because of subtracting two integers without checking if the result... CVE-2019-2331 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Out of boundary access due to token received from ADSP and is used without validation as an index... CVE-2019-2325 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 more When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the... CVE-2019-2324 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Lack of check to ensure crypto engine data passed by user is initialized can result in bus error... CVE-2019-2323 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Out of bound write issue is observed while giving information about properties that have been set... CVE-2019-2285 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 more Improper validation of read and write index of tx and rx fifo`s before calculating pointer can... CVE-2019-2283 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9205 firmware +41 more +43 more While deserializing any key blob during key operations, buffer overflow could occur exposing... CVE-2019-2275 5.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +48 more +50 more Improper validation of array index causes OOB write and then leads to memory corruption in MMCP... CVE-2019-2258 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9205 firmware +25 more +27 more Kernel can do a memory read from arbitrary address passed by user during execution of a syscall... CVE-2019-2249 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9205 firmware, mdm9640 firmware +31 more +33 more Thread start can cause invalid memory writes to arbitrary memory location since the argument is... CVE-2019-2246 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 more Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in... CVE-2019-10542 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 more Null-pointer dereference can occur while accessing the super index entry when it is not been... CVE-2019-10534 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 more Out of bound access due to improper validation of array index cause the index table entry to get... CVE-2019-10533 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 more Use after free issue in kernel while accessing freed mdlog session info and its attributes after... CVE-2019-10528 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer... CVE-2019-10524 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon... CVE-2019-10522 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 more DCI client which might be preemptively freed up might be accessed for transferring packets... CVE-2019-10515 5.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +46 more +48 more Payload size is not checked before using it as array index in audio in Snapdragon Auto,... CVE-2019-10512 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +25 more +27 more Firmware not able to send EXT scan response to host within 1 sec due to resource consumption... CVE-2019-10504 6.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Lack of checking a variable received from driver and populating in Firmware data structure leads... CVE-2019-10496 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in... CVE-2019-10495 7.3 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +45 more +47 more ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon... CVE-2019-10491 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard... CVE-2019-10488 7.5 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable... CVE-2019-2341 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 more Buffer overflow due to improper validation of buffer size while IPA driver processing to perform... CVE-2019-2333 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9205 firmware, mdm9206 firmware +45 more +47 more Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap... CVE-2019-2294 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9650 firmware, msm8909w firmware +34 more +36 more Classic buffer overflow vulnerability while playing the specific video whose Decode picture... CVE-2019-2252 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +47 more +49 more Possible buffer overflow issue due to lack of length check when parsing the extended cap IE... CVE-2019-10539 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +30 more +32 more Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto,... CVE-2019-10509 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Possible use after free issue due to improper input validation in volume listener library in... CVE-2019-10501 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in... CVE-2019-10498 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 more Use after free issue occurs If another instance of open for voice_svc node has been called from... CVE-2019-10497 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon mobile, snapdragon wearables, qualcomm mdm9607 firmware, msm8909w firmware +16 more +18 more Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon... CVE-2019-10492 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto... CVE-2019-10489 7.5 HighSeptember 30, 2019
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, qca8081 firmware +22 more +24 more Firmware is getting into loop of overwriting memory when scan command is given from host because... CVE-2019-2346 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +20 more +22 more Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon... CVE-2019-2345 7.0 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Out of bound read and information disclosure in firmware due to insufficient checking of an... CVE-2019-2343 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Null pointer dereferencing can happen when playing the clip with wrong block group id in... CVE-2019-2334 7.5 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +36 more +38 more improper input validation in allocation request for secure allocations can lead to page fault. in... CVE-2019-2330 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +43 more +45 more Possible buffer overflow when number of channels passed is more than size of channel mapping... CVE-2019-2328 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon... CVE-2019-2327 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Data token is received from ADSP and is used without validation as an index into the array leads... CVE-2019-2326 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto,... CVE-2019-2322 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9640 firmware, qcs405 firmware +19 more +21 more When computing the digest a local variable is used after going out of scope in Snapdragon Auto,... CVE-2019-2316 8.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, mdm9640 firmware +33 more +35 more When handling the vendor command there exists a potential buffer overflow due to lack of input... CVE-2019-2312 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +33 more +35 more User application could potentially make RPC call to the fastrpc driver and the driver will allow... CVE-2019-2308 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 more Possible integer underflow due to lack of validation before calculation of data length in 802.11... CVE-2019-2307 9.8 CriticalJuly 25, 2019
• Show olderLoading…