Qualcomm Sd 650 Firmware vulnerabilities

• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 more Buffer Over-read in IPA CVE-2018-5852 8.4 HighNovember 26, 2024
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 more Improper Authentication in TrustZone CVE-2018-11952 7.8 HighNovember 26, 2024
• qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +21 more +23 more Permissions, Privileges, and Access Controls in Data CVE-2017-9711 6.7 MediumNovember 22, 2024
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9205 firmware +41 more +43 more While deserializing any key blob during key operations, buffer overflow could occur exposing... CVE-2019-2275 5.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +48 more +50 more Improper validation of array index causes OOB write and then leads to memory corruption in MMCP... CVE-2019-2258 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Out of bound access while processing a non-standard IE measurement request with length crossing... CVE-2019-10505 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +25 more +27 more Firmware not able to send EXT scan response to host within 1 sec due to resource consumption... CVE-2019-10504 6.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9205 firmware, mdm9206 firmware +45 more +47 more Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap... CVE-2019-2294 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 more Lack of input validation for data received from user space can lead to OOB access in WLAN in... CVE-2019-10508 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 more Multiple open and close from multiple threads will lead camera driver to access destroyed session... CVE-2019-2290 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs605 firmware +28 more +30 more IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon... CVE-2019-2273 7.5 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 more Buffer overflow can occur in display function due to lack of validation of header block size set... CVE-2019-2272 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +31 more +33 more Access to freed memory can happen while reading from diag driver due to use after free issue in... CVE-2019-2263 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 more Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon... CVE-2019-2254 9.8 CriticalJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 more Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of... CVE-2019-2239 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +36 more +38 more Null pointer dereference during secure application termination using specific application ids. in... CVE-2019-2236 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +27 more +29 more Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an... CVE-2018-13897 7.5 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 more Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to... CVE-2019-2261 5.5 MediumJuly 22, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +54 more +56 more Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in... CVE-2018-13924 9.8 CriticalJuly 22, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 more A non-time constant function memcmp is used which creates a side channel that could leak... CVE-2018-5913 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Out of bounds read occurs due to improper validation of array while processing VDEV stop response... CVE-2018-5903 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in... CVE-2018-13911 9.8 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 more Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon... CVE-2018-13910 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 more Truncated access authentication token leads to weakened access control for stored secure... CVE-2018-13908 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 more While deserializing any key blob during key operations, buffer overflow could occur, exposing... CVE-2018-13907 5.3 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 more The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis... CVE-2018-13906 9.1 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Out of bounds memory read and access due to improper array index validation may lead to... CVE-2018-13902 7.5 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can... CVE-2018-13901 5.5 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +46 more +48 more Lack of check on length of reason-code fetched from payload may lead driver access the memory not... CVE-2018-11955 9.8 CriticalJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 more Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,... CVE-2018-11939 7.8 HighJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 more Kernel can inject faults in computations during the execution of TrustZone leading to information... CVE-2017-8252 5.5 MediumJune 14, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm 215 firmware, mdm9150 firmware +31 more +33 more Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size... CVE-2019-2248 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +36 more +38 more Possibility of double free issue while running multiple instances of smp2p test because of proper... CVE-2019-2247 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearable, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 more Possible integer underflow can happen when calculating length of elementary stream info from... CVE-2019-2244 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Error in parsing PMT table frees the memory allocated for the map section but does not reset the... CVE-2018-13925 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +35 more +37 more Due to the missing permissions on several content providers of the RCS app in its android... CVE-2018-13895 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 more Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon... CVE-2018-13886 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 more ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto,... CVE-2018-11976 5.5 MediumMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 more Signature verification of the skel library could potentially be disabled as the memory region on... CVE-2018-11967 7.8 HighMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 more While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to... CVE-2018-11953 9.8 CriticalMay 24, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Improper authentication can happen on Remote command handling due to inappropriate handling of... CVE-2018-11271 9.8 CriticalMay 24, 2019
• qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 more Lack of check of buffer length before copying can lead to buffer overflow in camera module in... CVE-2017-18279 7.8 HighMay 6, 2019
• qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 more An integer underflow may occur due to lack of check when received data length from... CVE-2017-18278 7.8 HighMay 6, 2019
• qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 more A new account can be inserted into simContacts service using Android command line tool in... CVE-2017-18275 5.5 MediumMay 6, 2019
• qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 more While iterating through the models contained in a fixed-size array in the actData structure,... CVE-2017-18274 7.8 HighMay 6, 2019
• qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 more A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon... CVE-2017-18157 7.8 HighMay 6, 2019
• qualcomm technologies, inc. snapdragon mobile, qualcomm sd 410 firmware, sd 412 firmware +14 more +16 more When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in... CVE-2017-15841 5.5 MediumMay 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 more Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,... CVE-2018-11966 7.8 HighApril 4, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 more Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad... CVE-2018-11958 5.5 MediumApril 4, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Improper validation of array index can lead to unauthorized access while processing debugFS in... CVE-2018-13913 7.8 HighFebruary 25, 2019
• Show olderLoading…