Skip to contentQualcomm Sd 835 Firmware vulnerabilities
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +14 more +16 moreWhen a malformed command is sent to the device programmer, an out-of-bounds access can occur in...CVE-2018-119967.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSMMU secure camera logic allows secure camera controllers to access HLOS memory during session in...CVE-2018-119947.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...CVE-2018-119217.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 morePossible buffer overflow in Ontario fingerprint code due to lack of input validation for the...CVE-2018-112647.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSecure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon...CVE-2017-183167.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreImproper input validation leads to buffer overflow while processing network list offload command...CVE-2018-118847.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreIncorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon...CVE-2018-118827.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreIncorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon...CVE-2018-118807.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreWhen the buffer length passed is very large in WLAN, bounds check could be bypassed leading to...CVE-2018-118777.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreLack of input validation while copying to buffer in WLAN will lead to a buffer overflow in...CVE-2018-118767.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreBuffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection...CVE-2018-118747.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreBuffer overwrite can occur when the legacy rates count received from the host is not checked...CVE-2018-118707.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreInteger overflow may happen in WLAN when calculating an internal structure size due to lack of...CVE-2018-118667.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreInteger overflow may happen when calculating an internal structure size due to lack of validation...CVE-2018-118657.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +1 more +3 moreWhen processing IE set command, buffer overwrite may occur due to lack of input validation of the...CVE-2018-118587.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +1 more +3 moreImproper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon...CVE-2018-118577.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +1 more +3 moreImproper input validation leads to buffer overwrite in the WLAN function that handles WMI...CVE-2018-118567.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreImproper input validation in TZ led to array out of bound in TZ function while accessing the...CVE-2018-59147.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +14 more +16 moreWhile processing logs, data is copied into a buffer pointed to by an untrusted pointer in...CVE-2018-58667.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +9 more +11 moreThere is improper access control of the SSC and GPU mapped regions which lead to inject code from...CVE-2018-35887.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreLack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon...CVE-2018-118547.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +21 more +23 moreLack of check on out of range for channels When processing channel list set command will lead to...CVE-2018-118537.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreLack of check on remaining length parameter When processing scan start command will lead to...CVE-2018-118507.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +41 more +43 moreLack of check on out of range of bssid parameter When processing scan start command will lead to...CVE-2018-118497.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +8 more +10 moreA stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon...CVE-2018-118247.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sd 845 firmware +2 more +4 moreA possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in...CVE-2018-118227.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +19 more +21 morePossible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile,...CVE-2018-118217.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreWhen a series of FDAL messages are sent to the modem, a Use After Free condition can occur in...CVE-2018-113057.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, mdm9635m firmware +33 more +35 moreXPU Master privilege escalation is possible due to improper access control of unused...CVE-2017-183117.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm msm8909w firmware, msm8996au firmware +29 more +31 moreClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon...CVE-2017-183107.8 High
- qualcomm, inc. small cell soc, snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, ipq4019 firmware +34 more +36 moreDuring secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell...CVE-2017-181247.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +5 more +7 moreXBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse...CVE-2017-183057.0 High
- qaulcomm fsm9055 firmware, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreInsufficient memory allocation in boot due to incorrect size being passed could result in out of...CVE-2017-183047.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 moreWhile processing the sensors registry configuration file, if inputs are not validated a buffer...CVE-2017-183037.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +6 more +8 moreSecure display content could be accessed by third party trusted application after creating a...CVE-2017-183005.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +17 more +19 moreImproper translation table consolidation logic leads to resource exhaustion and QSEE error in...CVE-2017-182995.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +24 more +26 moreLack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile,...CVE-2017-182987.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreAccess control on applications is not applied while accessing SafeSwitch services can lead to...CVE-2017-182967.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +17 more +19 morePossible buffer overflow if input is not null terminated in DSP Service module in Snapdragon...CVE-2017-182957.8 High
- qualcomm, inc. small cell soc, snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, mdm9206 firmware +22 more +24 moreWhile reading file class type from ELF header, a buffer overread may happen if the ELF file size...CVE-2017-182947.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +12 more +14 moreWhen a particular GPIO is protected by blocking access to the corresponding GPIO resource...CVE-2017-182937.8 High
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +7 more +9 morePossible memory corruption when Read Val Blob Req is received with invalid parameters in...CVE-2017-182836.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +21 more +23 moreWhen dynamic memory allocation fails, currently the process sleeps for one second and continues...CVE-2017-182775.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm mdm9635m firmware, sd 400 firmware +22 more +24 moreIn a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain...CVE-2017-181727.8 High
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +23 more +25 moreImproper input validation for GATT data packet received in Bluetooth Controller function can lead...CVE-2017-181718.8 High
- qualcomm, inc. snapdragon mobile, qualcomm qca9379 firmware, sd 205 firmware +23 more +25 moreImproper input validation in Bluetooth Controller function can lead to possible memory corruption...CVE-2017-181708.8 High
- qualcomm msm8996au firmware, sd 450 firmware, sd 625 firmware +4 more +6 moreWhile playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version...CVE-2017-181557.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +22 more +24 moreImproper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon...CVE-2018-58946.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +25 more +27 moreThe Touch Pal application can collect user behavior data without awareness by the user in...CVE-2018-58927.5 High
- Show moreLoading…