Skip to contentQualcomm Sda845 vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +33 more +35 moreOut of bound read would occur while trying to read action category and action ID without...CVE-2019-23107.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreOut of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a...CVE-2019-22887.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +37 more +39 morePossible integer overflow while multiplying two integers of 32 bit in QDCM API of get display...CVE-2019-105927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +39 more +41 moreSnapshot of IB can lead to invalid address access due to missing check for size in the related...CVE-2019-105717.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreAccessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer...CVE-2019-105599.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +38 more +40 moreBuffer overflow can occur due to usage of wrong datatype and missing length check before copying...CVE-2019-105557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto,...CVE-2019-105119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreRace condition between the camera functions due to lack of resource lock which will lead to...CVE-2019-104948.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +46 more +48 morePosition determination accuracy may be degraded due to wrongly decoded information in Snapdragon...CVE-2019-104939.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreInfinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto,...CVE-2019-104857.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8098 firmware, msm8909w firmware +14 more +16 moreUse after free issue occurs when command destructors access dynamically allocated response buffer...CVE-2019-104845.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +13 more +15 moreOut of bound access due to lack of check of whiltelist array size while reading the image elf...CVE-2019-23397.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreWhile processing Attach Reject message, Valid exit condition is not met resulting into an...CVE-2019-23357.5 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +11 more +13 moreUse after free issue in cleanup routine due to missing pointer sanitization for a failed start of...CVE-2019-23297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreWhile invoking the API to copy from fd or local buffer to the secure buffer, Parameters being...CVE-2019-23157.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreSNDCP module may access array out side its boundary when it receives malformed XID message. in...CVE-2019-23039.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +28 more +30 moreBuffer overflow can occur while processing non-standard NAN message from user space. in...CVE-2019-22977.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +30 more +32 moreInformation disclosure due to lack of address range check done on the SysDBG buffers in SDI code....CVE-2019-22955.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreLack of integrity check allows MODEM to accept any NAS messages which can result into...CVE-2019-22899.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreBuffer over read can happen while parsing downlink session management OTA messages if network...CVE-2019-22719.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8016 firmware, apq8096au firmware +25 more +27 moreIf a bitmap file is loaded from any un-authenticated source, there is a possibility that the...CVE-2019-22517.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +24 more +26 moreBuffer overflow can occur in wlan module if supported rates or extended rates element length is...CVE-2019-105667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +11 more +13 moreImproper validation for loop variable received from firmware can lead to out of bound access in...CVE-2019-105355.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 moreUse after free issue in Xtra daemon shutdown due to static object instance getting freed from a...CVE-2019-104905.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +34 more +36 moreRace condition due to the lack of resource lock which will be concurrently modified in the memcpy...CVE-2019-104867.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreOut-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt...CVE-2018-139167.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +28 more +30 moreWhile processing vendor command which contains corrupted channel count, an integer overflow...CVE-2019-23029.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +28 more +30 morePossible buffer overflow in DRM Trusted application due to lack of check function return values...CVE-2018-59187.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 425 firmware +12 more +14 morePossible buffer overflow in OEM crypto function due to improper input validation in Snapdragon...CVE-2018-59177.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreBuffer overread while decoding PDP modify request or network initiated secondary PDP activation...CVE-2018-59166.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSMMU secure camera logic allows secure camera controllers to access HLOS memory during session in...CVE-2018-119947.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...CVE-2018-119217.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSecure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon...CVE-2017-183167.8 High