Skip to contentQualcomm Sdx24 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9206 firmware +26 more +28 moreImproper buffer length check before copying can lead to integer overflow and then a buffer...CVE-2018-119237.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables,, qualcomm mdm9150 firmware, mdm9206 firmware +23 more +25 morekernel could return a received message length higher than expected, which leads to buffer...CVE-2018-139187.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...CVE-2018-139137.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreArbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon...CVE-2018-139125.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +18 more +20 moreKGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free...CVE-2018-139057.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreUse-after-free vulnerability will occur as there is no protection for the route table`s rule in...CVE-2018-139007.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...CVE-2018-118997.8 High
- qualcomm msm8996au firmware, sd 425 firmware, sd 430 firmware +14 more +16 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and...CVE-2018-58687.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,...CVE-2018-58677.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +22 more +24 moreAnti-rollback can be bypassed in replay scenario during app loading due to improper error...CVE-2018-35955.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +19 more +21 moreImproper input validation in trustzone can lead to denial of service in snapdragon automobile,...CVE-2018-119995.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 morePossible undefined behavior due to lack of size check in function for parameter segment_idx can...CVE-2018-112887.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 moreImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile...CVE-2017-82767.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...CVE-2017-183307.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +30 more +32 moreCryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon...CVE-2017-183245.5 Medium
- qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 moreQSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in...CVE-2017-183207.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +32 more +34 moreWhen a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure...CVE-2017-181417.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +35 more +37 moreA non-secure user may be able to access certain registers in snapdragon automobile, snapdragon...CVE-2017-110045.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +28 more +30 morePossible buffer overflow in DRM Trusted application due to lack of check function return values...CVE-2018-59187.8 High
- qualcomm, inc. snapdragon automobile, snapdragon mobile, qualcomm msm8996au firmware, sd 425 firmware +12 more +14 morePossible buffer overflow in OEM crypto function due to improper input validation in Snapdragon...CVE-2018-59177.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 835 firmware, sda660 firmware +1 more +3 moreWhile loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in...CVE-2018-58707.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +14 more +16 moreWhen a malformed command is sent to the device programmer, an out-of-bounds access can occur in...CVE-2018-119967.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSMMU secure camera logic allows secure camera controllers to access HLOS memory during session in...CVE-2018-119947.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +27 more +29 moreFailure condition is not handled properly and the correct error code is not returned. It could...CVE-2018-119217.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +18 more +20 moreSecure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon...CVE-2017-183167.8 High