Skip to contentQualcomm Sd 820a Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreOut-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon...CVE-2018-139107.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +45 more +47 moreTruncated access authentication token leads to weakened access control for stored secure...CVE-2018-139087.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +50 more +52 moreWhile deserializing any key blob during key operations, buffer overflow could occur, exposing...CVE-2018-139075.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 moreThe HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis...CVE-2018-139069.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreOut of bounds memory read and access due to improper array index validation may lead to...CVE-2018-139027.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreDue to missing permissions in Android Manifest file, Sensitive information disclosure issue can...CVE-2018-139015.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +46 more +48 moreLack of check on length of reason-code fetched from payload may lead driver access the memory not...CVE-2018-119559.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8064 firmware, mdm9150 firmware +40 more +42 moreThe txrx stats req might be double freed in the pdev detach when the host driver is unloading in...CVE-2018-119475.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +31 more +33 moreFailure to initialize the reserved memory which is sent to the firmware might lead to exposure of...CVE-2018-119425.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 morePossible out of bounds write due to improper input validation while processing DO_ACS vendor...CVE-2018-119347.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +27 more +29 moreLack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto,...CVE-2018-119297.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +18 more +20 moreUse after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto,...CVE-2018-118197.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 moreKernel can inject faults in computations during the execution of TrustZone leading to information...CVE-2017-82525.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm 215 firmware, mdm9150 firmware +31 more +33 moreBuffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size...CVE-2019-22487.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +36 more +38 morePossibility of double free issue while running multiple instances of smp2p test because of proper...CVE-2019-22477.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream map from...CVE-2019-22459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearable, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream info from...CVE-2019-22449.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreError in parsing PMT table frees the memory allocated for the map section but does not reset the...CVE-2018-139259.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreUse-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access...CVE-2018-139207.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreProcessing messages after error may result in user after free memory fault in Snapdragon Auto,...CVE-2018-138997.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +35 more +37 moreDue to the missing permissions on several content providers of the RCS app in its android...CVE-2018-138957.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreUnchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon...CVE-2018-138869.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreAn unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto,...CVE-2018-120055.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto,...CVE-2018-119765.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 moreImproper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon...CVE-2018-119687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreSignature verification of the skel library could potentially be disabled as the memory region on...CVE-2018-119677.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreWhile processing ssid IE length from remote AP, possible out-of-bounds access may occur due to...CVE-2018-119539.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +25 more +27 moreFailure to initialize the extra buffer can lead to an out of buffer access in WLAN function in...CVE-2018-119499.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +22 more +24 moreLack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon...CVE-2018-119409.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +28 more +30 moreLack of input validation before copying can lead to a buffer over read in WLAN function in...CVE-2018-119379.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIndex of array is processed in a wrong way inside a while loop and result in invalid index (-1 or...CVE-2018-119369.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +29 more +31 moreImproper input validation on input data which is used to locate and copy the additional IEs in...CVE-2018-119309.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +40 more +42 moreLack of check on length parameter may cause buffer overflow while processing WMI commands in...CVE-2018-119287.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +24 more +26 moreImproper input validation on input which is used as an array index will lead to an out of bounds...CVE-2018-119277.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreImproper buffer length validation in WLAN function can lead to a potential integer oveflow issue...CVE-2018-119247.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreImproper authentication can happen on Remote command handling due to inappropriate handling of...CVE-2018-112719.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +26 more +28 moreImproper buffer length check before copying can lead to integer overflow and then a buffer...CVE-2018-119237.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +15 more +17 moreAn integer underflow may occur due to lack of check when received data length from...CVE-2017-182787.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreA new account can be inserted into simContacts service using Android command line tool in...CVE-2017-182755.5 Medium
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile iterating through the models contained in a fixed-size array in the actData structure,...CVE-2017-182747.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreA Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon...CVE-2017-181577.8 High
- qualcomm technologies, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +10 more +12 moreWhile processing camera buffers in camera driver, a use after free condition can occur in...CVE-2017-181567.8 High
- qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,...CVE-2017-181317.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables,, qualcomm mdm9150 firmware, mdm9206 firmware +23 more +25 morekernel could return a received message length higher than expected, which leads to buffer...CVE-2018-139187.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreUndefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,...CVE-2018-119667.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +6 more +8 moreImproper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto...CVE-2018-118307.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9615 firmware +28 more +30 moreImproperly configured memory protection allows read/write access to modem image from HLOS kernel...CVE-2018-58397.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreLack of input validation for data received from user space can lead to an out of bound array...CVE-2018-139147.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...CVE-2018-139137.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreArbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon...CVE-2018-139125.5 Medium
- Show moreLoading…