Skip to contentQualcomm Sda660 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +30 more +32 moreWhen issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under...CVE-2019-105477.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +21 more +23 moreTarget specific data is being sent to remote server and leads to information exposure in...CVE-2019-105235.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +50 more +52 moreSide channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp...CVE-2019-104835.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 morePossible buffer overflow in WLAN handler due to lack of validation of destination buffer size...CVE-2019-23119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +30 more +32 morePossible buffer overflow in WLAN handler due to lack of validation of destination buffer size...CVE-2019-23009.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 morePossible buffer overflow in data offload handler due to lack of check of keydata length when...CVE-2019-140989.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096 firmware, apq8096au firmware +38 more +40 morePossible buffer overflow in WLAN Parser due to lack of length check when copying data in...CVE-2019-140979.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +63 more +65 moreBuffer overflow occurs while processing LMP packet in which name length parameter exceeds value...CVE-2019-140959.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, mdm9607 firmware +16 more +18 morePossible integer overflow while checking the length of frame which is a 32 bit integer and is...CVE-2019-140869.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 moreWhile parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a...CVE-2019-140839.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq8074 firmware +15 more +17 moreBuffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits...CVE-2019-140817.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +30 more +32 moreUnhandled paging request is observed due to dereferencing an already freed object because of race...CVE-2019-140727.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8053 firmware +41 more +43 moreCompromised reset handler may bypass access control due to AC config is being reset if debug path...CVE-2019-140717.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 moreNull-pointer dereference can occur while accessing the segment element info when it is not...CVE-2019-140617.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, mdm9150 firmware +23 more +25 moreOut-of-bound writes occurs due to lack of check of buffer size will cause buffer overflow only in...CVE-2019-140507.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than...CVE-2019-140319.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +31 more +33 moreUse-after-free in graphics module due to destroying already queued syncobj in error case in...CVE-2019-140297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto,...CVE-2019-140287.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq6018 firmware +23 more +25 moreBuffer overflow due to lack of upper bound check on channel length which is used for a loop. in...CVE-2019-140277.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 morePossible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data...CVE-2019-140267.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096 firmware, apq8096au firmware +26 more +28 moreA stack-based buffer overflow exists in the initialization of the identification stage due to...CVE-2019-140157.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreLack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO...CVE-2019-140007.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +26 more +28 morePossibility of heap-buffer-overflow during last iteration of loop while populating image version...CVE-2019-106047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreStack overflow can occur when SDP is received with multiple payload types in the FMTP attribute...CVE-2019-105949.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow can occur when processing non standard SDP video Image attribute parameter in a...CVE-2019-105939.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreNull pointer dereference can happen when parsing udta atom which is non-standard and having...CVE-2019-105917.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 morePossible Stack overflow can occur when processing a large SDP body or non standard SDP body...CVE-2019-105879.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreFilling media attribute tag names without validating the destination buffer size which can result...CVE-2019-105869.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreImproper input validation while processing SIP URI received from the network will lead to buffer...CVE-2019-105779.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreMultiple Read overflows issue due to improper length check while decoding Identity Request in...CVE-2019-105549.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreMultiple Read overflows due to improper length checks while decoding authentication in Cs domain...CVE-2019-105539.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreMultiple Buffer Over-read issue can happen due to improper length checks while decoding Service...CVE-2019-105529.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +38 more +40 moreBuffer Over-read when UE is trying to process the message received form the network without zero...CVE-2019-105509.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8096 firmware, apq8096au firmware +35 more +37 moreBuffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during...CVE-2019-105469.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, mdm9640 firmware +4 more +6 morePossible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon...CVE-2018-118387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreBuffer Over read of codec private data while parsing an mkv file due to lack of check of buffer...CVE-2019-140579.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 morePossibility of use-after-free and double free because of not marking buffer as NULL after freeing...CVE-2019-140557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreDuring listener modified response processing, a buffer overrun occurs due to lack of buffer size...CVE-2019-14041Public exploit7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreUsing memory after being freed in qsee due to wrong implementation can lead to unexpected...CVE-2019-14040Public exploit7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +27 more +29 moreAPKs without proper permission may bind to CallEnhancementService and can lead to unauthorized...CVE-2019-140027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreOut of bound access while parsing dts atom, which is non-standard as it does not have valid...CVE-2019-105909.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreThere is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer...CVE-2019-105677.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreHeap buffer overflow can occur while parsing invalid MKV clip which is not standard and have...CVE-2019-140179.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreInteger overflow occurs while playing the clip which is nonstandard in Snapdragon Auto,...CVE-2019-140169.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreWhile parsing invalid super index table, elements within super index table may exceed total chunk...CVE-2019-140139.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer overflow occur while playing the clip which is nonstandard due to lack of offset length...CVE-2019-140069.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreBuffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in...CVE-2019-140049.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreNull pointer exception can happen while parsing invalid MKV clip where cue information is parsed...CVE-2019-140037.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreBuffer overflow can occur while processing clip due to lack of check of object size before...CVE-2019-106119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +17 more +19 morePotential use-after-free heap error during Validate/Present calls on display HW composer in...CVE-2019-106027.8 High
- Show moreLoading…