Skip to contentQualcomm Sd 820 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreData token is received from ADSP and is used without validation as an index into the array leads...CVE-2019-23267.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 moreBuffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto,...CVE-2019-23229.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhen handling the vendor command there exists a potential buffer overflow due to lack of input...CVE-2019-23127.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 morePossible integer underflow due to lack of validation before calculation of data length in 802.11...CVE-2019-23079.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper casting of structure while handling the buffer leads to out of bound read in display in...CVE-2019-23067.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreOut of bound access when reason code is extracted from frame data without validating the frame...CVE-2019-23059.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +38 more +40 moreAn out-of-bound write can be triggered by a specially-crafted command supplied by a userspace...CVE-2019-22997.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreProtection is missing while accessing md sessions info via macro which can lead to use-after-free...CVE-2019-22987.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreMultiple open and close from multiple threads will lead camera driver to access destroyed session...CVE-2019-22907.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs405 firmware, qcs605 firmware +18 more +20 moreAn unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of...CVE-2019-22817.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs605 firmware +28 more +30 moreIOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon...CVE-2019-22737.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +31 more +33 moreAccess to freed memory can happen while reading from diag driver due to use after free issue in...CVE-2019-22637.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 morePosition determination accuracy may be degraded due to wrongly decoded information in Snapdragon...CVE-2019-22549.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 moreBuffer over-read can occur while parsing an ogg file with a corrupted comment block. in...CVE-2019-22539.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreWhile rendering the layout background, Error status check is not caught properly and also...CVE-2019-22415.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +48 more +50 moreWhile sending the rendered surface content to the screen, Error handling is not properly checked...CVE-2019-22405.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreSanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of...CVE-2019-22395.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +36 more +38 moreNull pointer dereference during secure application termination using specific application ids. in...CVE-2019-22365.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +33 more +35 moreBuffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA...CVE-2019-22357.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +27 more +29 moreClients hostname gets added to DNS record on device which is running dnsmasq resulting in an...CVE-2018-138977.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreImproper validation for inputs received from firmware can lead to an out of bound write issue in...CVE-2019-22879.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 moreShared memory gets updated with invalid data and may lead to access beyond the allocated memory....CVE-2019-22799.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9650 firmware +22 more +24 morePossible buffer overflow while processing the high level lim process action frame due to improper...CVE-2019-22699.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreUnauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to...CVE-2019-22615.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +36 more +38 morePossible buffer overflow at the end of iterating loop while getting the version info and lead to...CVE-2019-22435.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreDebug policy with invalid signature can be loaded when the debug policy functionality is disabled...CVE-2018-139277.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +54 more +56 moreLack of check to prevent the buffer length taking negative values can lead to stack overflow. in...CVE-2018-139249.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +34 more +36 moreXBL_SEC image authentication and other crypto related validations are accessible to a compromised...CVE-2018-138967.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +33 more +35 moreResource allocation error while playing the video whose dimensions are more than supported...CVE-2019-22599.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +22 more +24 moreWrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto,...CVE-2019-22577.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9650 firmware, msm8909w firmware +33 more +35 moreAn unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains...CVE-2019-22569.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +33 more +35 moreAn unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains...CVE-2019-22559.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +49 more +51 moreA non-time constant function memcmp is used which creates a side channel that could leak...CVE-2018-59137.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +16 more +18 moreA buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto,...CVE-2018-35837.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreUse-after-free vulnerability will occur if reset of the routing table encounters an invalid rule...CVE-2018-139197.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in...CVE-2018-139119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreOut-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon...CVE-2018-139107.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 moreTruncated access authentication token leads to weakened access control for stored secure...CVE-2018-139087.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 moreWhile deserializing any key blob during key operations, buffer overflow could occur, exposing...CVE-2018-139075.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 moreThe HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis...CVE-2018-139069.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access due to improper array index validation may lead to...CVE-2018-139027.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreDue to missing permissions in Android Manifest file, Sensitive information disclosure issue can...CVE-2018-139015.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +46 more +48 moreLack of check on length of reason-code fetched from payload may lead driver access the memory not...CVE-2018-119559.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreUse after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,...CVE-2018-119397.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 moreKernel can inject faults in computations during the execution of TrustZone leading to information...CVE-2017-82525.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm 215 firmware, mdm9150 firmware +31 more +33 moreBuffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size...CVE-2019-22487.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream map from...CVE-2019-22459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearable, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream info from...CVE-2019-22449.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreError in parsing PMT table frees the memory allocated for the map section but does not reset the...CVE-2018-139259.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreProcessing messages after error may result in user after free memory fault in Snapdragon Auto,...CVE-2018-138997.8 High
- Show moreLoading…