Skip to content

Qualcomm Sdm632 Firmware vulnerabilities

qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 moreIncorrect length used while validating the qsee log buffer sent from HLOS which could then lead...CVE-2019-23217.8 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 morePossible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in...CVE-2019-23209.8 CriticalDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreOut of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a...CVE-2019-22887.8 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +37 more +39 morePossible integer overflow while multiplying two integers of 32 bit in QDCM API of get display...CVE-2019-105927.8 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +39 more +41 moreSnapshot of IB can lead to invalid address access due to missing check for size in the related...CVE-2019-105717.8 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreAccessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer...CVE-2019-105599.8 CriticalDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +38 more +40 moreBuffer overflow can occur due to usage of wrong datatype and missing length check before copying...CVE-2019-105557.8 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto,...CVE-2019-105119.8 CriticalDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreRace condition between the camera functions due to lack of resource lock which will lead to...CVE-2019-104948.1 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +46 more +48 morePosition determination accuracy may be degraded due to wrongly decoded information in Snapdragon...CVE-2019-104939.8 CriticalDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreInfinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto,...CVE-2019-104857.5 HighDecember 12, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreWhile processing Attach Reject message, Valid exit condition is not met resulting into an...CVE-2019-23357.5 HighNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8053 firmware +17 more +19 moreNon Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS...CVE-2019-23185.5 MediumNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreWhile invoking the API to copy from fd or local buffer to the secure buffer, Parameters being...CVE-2019-23157.8 HighNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreSNDCP module may access array out side its boundary when it receives malformed XID message. in...CVE-2019-23039.8 CriticalNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +30 more +32 moreInformation disclosure due to lack of address range check done on the SysDBG buffers in SDI code....CVE-2019-22955.5 MediumNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreLack of integrity check allows MODEM to accept any NAS messages which can result into...CVE-2019-22899.8 CriticalNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreBuffer over read can happen while parsing downlink session management OTA messages if network...CVE-2019-22719.8 CriticalNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +34 more +36 moreRace condition due to the lack of resource lock which will be concurrently modified in the memcpy...CVE-2019-104867.0 HighNovember 21, 2019
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreOut-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt...CVE-2018-139167.8 HighNovember 21, 2019
qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,...CVE-2017-181317.8 HighMay 6, 2019
qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 HighOctober 29, 2018
qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreInteger overflow may happen in WLAN when calculating an internal structure size due to lack of...CVE-2018-118667.8 HighOctober 29, 2018
qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreInteger overflow may happen when calculating an internal structure size due to lack of validation...CVE-2018-118657.8 HighOctober 29, 2018
qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +21 more +23 moreLack of check on out of range for channels When processing channel list set command will lead to...CVE-2018-118537.8 HighOctober 26, 2018
qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +41 more +43 moreLack of check on out of range of bssid parameter When processing scan start command will lead to...CVE-2018-118497.8 HighOctober 26, 2018
qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +19 more +21 morePossible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile,...CVE-2018-118217.8 HighOctober 26, 2018
qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9607 firmware, mdm9635m firmware +33 more +35 moreXPU Master privilege escalation is possible due to improper access control of unused...CVE-2017-183117.8 HighOctober 26, 2018
qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm msm8909w firmware, msm8996au firmware +29 more +31 moreClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon...CVE-2017-183107.8 HighOctober 26, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +29 more +31 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...CVE-2018-58716.5 MediumSeptember 20, 2018
qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650,...CVE-2018-58377.5 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +28 more +30 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W,...CVE-2018-112927.8 HighSeptember 20, 2018
qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +34 more +36 moreIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650,...CVE-2018-112917.5 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +25 more +27 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...CVE-2018-112907.5 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W,...CVE-2018-112879.8 CriticalSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +30 more +32 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W,...CVE-2018-112857.8 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +33 more +35 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...CVE-2018-112697.8 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +33 more +35 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...CVE-2018-112687.8 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +37 more +39 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650,...CVE-2018-112677.8 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +35 more +37 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645,...CVE-2017-183149.8 CriticalSeptember 20, 2018
qualcomm msm8996au firmware, sd425 firmware, sd427 firmware +17 more +19 moreIn Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450,...CVE-2017-183024.7 MediumSeptember 20, 2018
qualcomm mdm9607 firmware, msm8909w firmware, msm8996au firmware +19 more +21 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212...CVE-2017-182807.8 HighSeptember 20, 2018
qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreDue to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and...CVE-2018-112597.7 HighJuly 6, 2018