Qualcomm Sd 855 Firmware vulnerabilities

• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 more Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in... CVE-2019-10530 7.8 HighDecember 12, 2019
• qualcomm, inc. snapdragon mobile, snapdragon voice & music, qualcomm qcs405 firmware, sd 205 firmware +11 more +13 more An unprivileged application can allocate GPU memory by calling memory allocation ioctl function... CVE-2019-10520 5.5 MediumDecember 12, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Memory corruption while accessing the memory as payload size is not validated before access in... CVE-2019-2332 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 more Possible Integer overflow because of subtracting two integers without checking if the result... CVE-2019-2331 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Out of boundary access due to token received from ADSP and is used without validation as an index... CVE-2019-2325 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +31 more +33 more When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the... CVE-2019-2324 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Lack of check to ensure crypto engine data passed by user is initialized can result in bus error... CVE-2019-2323 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Out of bound write issue is observed while giving information about properties that have been set... CVE-2019-2285 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 more Improper validation of read and write index of tx and rx fifo`s before calculating pointer can... CVE-2019-2283 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm mdm9150 firmware, mdm9205 firmware +41 more +43 more While deserializing any key blob during key operations, buffer overflow could occur exposing... CVE-2019-2275 5.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +48 more +50 more Improper validation of array index causes OOB write and then leads to memory corruption in MMCP... CVE-2019-2258 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9205 firmware +25 more +27 more Kernel can do a memory read from arbitrary address passed by user during execution of a syscall... CVE-2019-2249 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9205 firmware, mdm9640 firmware +31 more +33 more Thread start can cause invalid memory writes to arbitrary memory location since the argument is... CVE-2019-2246 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +34 more +36 more Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec... CVE-2019-10541 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 more Null-pointer dereference can occur while accessing the super index entry when it is not been... CVE-2019-10534 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +37 more +39 more Out of bound access due to improper validation of array index cause the index table entry to get... CVE-2019-10533 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Possible use after free issue due to race condition while attempting to mark the entry pages as... CVE-2019-10529 Public exploit 8.1 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 more Use after free issue in kernel while accessing freed mdlog session info and its attributes after... CVE-2019-10528 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 more Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer... CVE-2019-10524 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon... CVE-2019-10522 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +37 more +39 more DCI client which might be preemptively freed up might be accessed for transferring packets... CVE-2019-10515 5.5 MediumNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +46 more +48 more Payload size is not checked before using it as array index in audio in Snapdragon Auto,... CVE-2019-10512 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Out of bound access while processing a non-standard IE measurement request with length crossing... CVE-2019-10505 9.8 CriticalNovember 6, 2019
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +22 more +24 more Possible stack overflow when an index equal to io buffer size is accessed in camera module in... CVE-2019-10502 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Lack of checking a variable received from driver and populating in Firmware data structure leads... CVE-2019-10496 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in... CVE-2019-10495 7.3 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +45 more +47 more ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon... CVE-2019-10491 7.8 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard... CVE-2019-10488 7.5 HighNovember 6, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable... CVE-2019-2341 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9607 firmware +36 more +38 more Buffer overflow due to improper validation of buffer size while IPA driver processing to perform... CVE-2019-2333 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9205 firmware, mdm9206 firmware +45 more +47 more Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap... CVE-2019-2294 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, qcs405 firmware +19 more +21 more Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in... CVE-2019-2284 7.0 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9650 firmware, msm8909w firmware +34 more +36 more Classic buffer overflow vulnerability while playing the specific video whose Decode picture... CVE-2019-2252 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, msm8996au firmware +25 more +27 more Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN... CVE-2019-10540 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +47 more +49 more Possible buffer overflow issue due to lack of length check when parsing the extended cap IE... CVE-2019-10539 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +25 more +27 more Lack of check of address range received from firmware response allows modem to respond arbitrary... CVE-2019-10538 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs405 firmware, qcs605 firmware +10 more +12 more BT process died and BT toggled due to null pointer dereference when invalid vendor pass through... CVE-2019-10510 8.2 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +30 more +32 more Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto,... CVE-2019-10509 9.8 CriticalSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 more Lack of check of extscan change results received from firmware can lead to an out of buffer read... CVE-2019-10507 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +24 more +26 more While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not... CVE-2019-10506 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 more Possible use after free issue due to improper input validation in volume listener library in... CVE-2019-10501 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +6 more +8 more Improper validation of read and write index of tx and rx fifo`s before using for data copy from... CVE-2019-10499 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in... CVE-2019-10498 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +41 more +43 more Use after free issue occurs If another instance of open for voice_svc node has been called from... CVE-2019-10497 7.8 HighSeptember 30, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 more Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto... CVE-2019-10489 7.5 HighSeptember 30, 2019
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, qca8081 firmware +22 more +24 more Firmware is getting into loop of overwriting memory when scan command is given from host because... CVE-2019-2346 7.8 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware, msm8996au firmware +34 more +36 more Out of bound read and information disclosure in firmware due to insufficient checking of an... CVE-2019-2343 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +42 more +44 more Null pointer dereferencing can happen when playing the clip with wrong block group id in... CVE-2019-2334 7.5 HighJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +36 more +38 more improper input validation in allocation request for secure allocations can lead to page fault. in... CVE-2019-2330 5.5 MediumJuly 25, 2019
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +43 more +45 more Possible buffer overflow when number of channels passed is more than size of channel mapping... CVE-2019-2328 7.8 HighJuly 25, 2019
• Show olderLoading…