Skip to contentQualcomm Sd 435 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto,...CVE-2018-119765.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 moreImproper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon...CVE-2018-119687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreSignature verification of the skel library could potentially be disabled as the memory region on...CVE-2018-119677.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +25 more +27 moreFailure to initialize the extra buffer can lead to an out of buffer access in WLAN function in...CVE-2018-119499.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreLack of input validation before copying can lead to a buffer over read in WLAN function in...CVE-2018-119379.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIndex of array is processed in a wrong way inside a while loop and result in invalid index (-1 or...CVE-2018-119369.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreImproper input validation on input data which is used to locate and copy the additional IEs in...CVE-2018-119309.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +26 more +28 moreData length received from firmware is not validated against the max allowed size which can result...CVE-2018-119257.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreImproper buffer length validation in WLAN function can lead to a potential integer oveflow issue...CVE-2018-119247.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreImproper authentication can happen on Remote command handling due to inappropriate handling of...CVE-2018-112719.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +26 more +28 moreImproper buffer length check before copying can lead to integer overflow and then a buffer...CVE-2018-119237.8 High
- qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 moreLack of check of buffer length before copying can lead to buffer overflow in camera module in...CVE-2017-182797.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 427 firmware +11 more +13 moreIn case of using an invalid android verified boot signature with very large length, an integer...CVE-2017-181737.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 410 firmware, sd 412 firmware +14 more +16 moreWhen HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in...CVE-2017-158415.5 Medium
- qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,...CVE-2017-181317.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreUndefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,...CVE-2018-119667.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreInsufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad...CVE-2018-119585.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreUse-after-free vulnerability will occur as there is no protection for the route table`s rule in...CVE-2018-139007.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs605 firmware +28 more +30 moreExceeding the limit of usage entries are not tracked and the information will be lost causing the...CVE-2018-119485.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreImproper input validation in wireless service messaging module for data received from broadcast...CVE-2018-119459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +43 more +45 moreImproper input validation for argument received from HLOS can lead to buffer overflows and...CVE-2018-119387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto,...CVE-2018-119317.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreBytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon...CVE-2018-118645.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreUsage of non-time-constant comparison functions can lead to information leakage through side...CVE-2018-118455.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreUse of non-time constant memcmp function creates side channel that leaks information and leads to...CVE-2018-118205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreData truncation during higher to lower type conversion which causes less memory allocation than...CVE-2018-112897.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +30 more +32 moreThere is potential for memory corruption in the RIL daemon due to de reference of memory outside...CVE-2018-138887.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...CVE-2018-118997.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 moreUnauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from...CVE-2018-118887.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 moreMalicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory...CVE-2018-118477.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper validation of buffer length checks in the lwm2m device management protocol can leads to...CVE-2018-58818.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper data length check while processing an event report indication can lead to a buffer...CVE-2018-58807.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +14 more +16 moreImproper length check while processing an MQTT message can lead to heap overflow in snapdragon...CVE-2018-58798.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,...CVE-2018-58677.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +13 more +15 moreWhile processing a packet decode request in MQTT, Race condition can occur leading to an out-of...CVE-2018-119987.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 moreLack of check of input size can make device memory get corrupted because of buffer overflow in...CVE-2018-112798.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 moreImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile...CVE-2017-82767.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...CVE-2017-183307.8 High
- qualcomm mdm9615 firmware, mdm9625 firmware, mdm9635m firmware +35 more +37 morePossible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon...CVE-2017-183297.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +22 more +24 moreUse after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions...CVE-2017-183287.8 High
- qualcomm mdm9607 firmware, mdm9615 firmware, mdm9625 firmware +32 more +34 moreCryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear...CVE-2017-183265.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +30 more +32 moreCryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon...CVE-2017-183245.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +29 more +31 moreCryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon...CVE-2017-183225.5 Medium
- qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 moreQSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in...CVE-2017-183207.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +28 more +30 moreInformation leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions...CVE-2017-183195.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +32 more +34 moreWhen a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure...CVE-2017-181417.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +35 more +37 moreA non-secure user may be able to access certain registers in snapdragon automobile, snapdragon...CVE-2017-110045.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreInteger overflow may happen in WLAN when calculating an internal structure size due to lack of...CVE-2018-118667.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreInteger overflow may happen when calculating an internal structure size due to lack of validation...CVE-2018-118657.8 High
- Show moreLoading…