Skip to contentQualcomm Sd 650 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreImproper input validation in wireless service messaging module for data received from broadcast...CVE-2018-119459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +43 more +45 moreImproper input validation for argument received from HLOS can lead to buffer overflows and...CVE-2018-119387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto,...CVE-2018-119317.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreBytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon...CVE-2018-118645.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreUsage of non-time-constant comparison functions can lead to information leakage through side...CVE-2018-118455.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreUse of non-time constant memcmp function creates side channel that leaks information and leads to...CVE-2018-118205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreData truncation during higher to lower type conversion which causes less memory allocation than...CVE-2018-112897.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +30 more +32 moreThere is potential for memory corruption in the RIL daemon due to de reference of memory outside...CVE-2018-138887.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...CVE-2018-118997.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 moreUnauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from...CVE-2018-118887.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 moreMalicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory...CVE-2018-118477.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,...CVE-2018-58677.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +22 more +24 moreAnti-rollback can be bypassed in replay scenario during app loading due to improper error...CVE-2018-35955.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 moreLack of check of input size can make device memory get corrupted because of buffer overflow in...CVE-2018-112798.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 moreImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile...CVE-2017-82767.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...CVE-2017-183325.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...CVE-2017-183307.8 High
- qualcomm mdm9615 firmware, mdm9625 firmware, mdm9635m firmware +35 more +37 morePossible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon...CVE-2017-183297.8 High
- qualcomm mdm9607 firmware, mdm9635m firmware, mdm9640 firmware +26 more +28 moreSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon...CVE-2017-183275.5 Medium
- qualcomm mdm9607 firmware, mdm9615 firmware, mdm9625 firmware +32 more +34 moreCryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear...CVE-2017-183265.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +30 more +32 moreCryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon...CVE-2017-183245.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreCryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile,...CVE-2017-183235.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +29 more +31 moreCryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon...CVE-2017-183225.5 Medium
- qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 moreQSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in...CVE-2017-183207.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +28 more +30 moreInformation leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions...CVE-2017-183195.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +32 more +34 moreWhen a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure...CVE-2017-181417.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +35 more +37 moreA non-secure user may be able to access certain registers in snapdragon automobile, snapdragon...CVE-2017-110045.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +28 more +30 morePossible buffer overflow in DRM Trusted application due to lack of check function return values...CVE-2018-59187.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreBuffer overread while decoding PDP modify request or network initiated secondary PDP activation...CVE-2018-59166.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...CVE-2018-119217.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 morePossible buffer overflow in Ontario fingerprint code due to lack of input validation for the...CVE-2018-112647.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +10 more +12 moreMissing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in...CVE-2017-183189.8 Critical
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreBuffer overwrite can occur when the legacy rates count received from the host is not checked...CVE-2018-118707.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreImproper input validation in TZ led to array out of bound in TZ function while accessing the...CVE-2018-59147.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile processing logs, data is copied into a buffer pointed to by an untrusted pointer in...CVE-2018-58667.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +21 more +23 moreLack of check on out of range for channels When processing channel list set command will lead to...CVE-2018-118537.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +41 more +43 moreLack of check on out of range of bssid parameter When processing scan start command will lead to...CVE-2018-118497.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 205 firmware, sd 210 firmware +7 more +9 moreWhen FW tries to get random mac address generated from new SW RNG and ADC values read are...CVE-2018-118287.5 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +19 more +21 morePossible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile,...CVE-2018-118217.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreWhen a series of FDAL messages are sent to the modem, a Use After Free condition can occur in...CVE-2018-113057.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, mdm9635m firmware +33 more +35 moreXPU Master privilege escalation is possible due to improper access control of unused...CVE-2017-183117.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm msm8909w firmware, msm8996au firmware +29 more +31 moreClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon...CVE-2017-183107.8 High
- qualcomm, inc. small cell soc, snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, ipq4019 firmware +34 more +36 moreDuring secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell...CVE-2017-181247.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 410 firmware +7 more +9 moreWhile accessing SafeSwitch services, third party can manipulate a given device and perform...CVE-2017-183127.8 High
- qaulcomm fsm9055 firmware, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreInsufficient memory allocation in boot due to incorrect size being passed could result in out of...CVE-2017-183047.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreWhile processing the sensors registry configuration file, if inputs are not validated a buffer...CVE-2017-183037.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 moreImproper translation table consolidation logic leads to resource exhaustion and QSEE error in...CVE-2017-182995.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +24 more +26 moreLack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile,...CVE-2017-182987.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 430 firmware +5 more +7 moreDouble memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD...CVE-2017-182977.8 High
- Show moreLoading…