Skip to contentQualcomm Sm7150 vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossible buffer overflow while copying the frame to local buffer due to lack of check of length...CVE-2020-36149.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +62 more +64 moreInteger overflow in diag command handler when user inputs a large value for number of tasks field...CVE-2019-140947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +38 more +40 moreOut of bound write can happen due to lack of check of array index value while parsing SDP...CVE-2019-140809.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +30 more +32 moreBuffer overflow occurs while processing an subsample data length out of range due to lack of user...CVE-2019-140767.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +54 more +56 moreCopying RTCP messages into the output buffer without checking the destination buffer size which...CVE-2019-140739.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreBuffer overflows while decoding setup message from Network due to lack of check of IE message...CVE-2019-140629.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +18 more +20 morekernel writes to user passed address without any checks can lead to arbitrary memory write in...CVE-2019-105977.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 moreFirmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response...CVE-2020-36457.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +36 more +38 moreInteger overflow may occur if atom size is less than atom offset as there is improper validation...CVE-2020-36419.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 moreArray out of bound may occur while playing mp3 file as no check is there on offset if it is...CVE-2020-36339.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 morePossibility of out of bound access while processing the responses from video firmware in...CVE-2020-36307.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +25 more +27 moreBuffer overflow in display function due to memory copy without checking length of size using...CVE-2020-36167.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 morePossibility of double free of the drawobj that is added to the drawqueue array of the context...CVE-2020-36107.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +34 more +36 moreOut of bound memory access while processing ese transmit command due to passing Response buffer...CVE-2019-140777.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreUsing non-time-constant functions like memcmp to compare sensitive data can lead to information...CVE-2019-140675.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +12 more +14 moreInteger overflow in calculating estimated output buffer size when getting a list of installed...CVE-2019-140667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +39 more +41 moreWhen attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user...CVE-2019-140537.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +28 more +30 moreOut of bound read in Fingerprint application due to requested data is being used without length...CVE-2019-140437.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9205 firmware +21 more +23 moreOut of bound read in in fingerprint application due to requested data assigned to a local buffer...CVE-2019-140427.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +34 more +36 morePossible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages....CVE-2019-141357.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, qca8081 firmware +10 more +12 morePossible out of bound access in WLAN handler when the received value of length in rx path is...CVE-2019-141349.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +19 more +21 moreOut of bound write can occur in radio measurement request if STA receives multiple invalid rrm...CVE-2019-141319.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 morePossible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in...CVE-2019-141279.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than...CVE-2019-141149.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during...CVE-2019-141139.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq6018 firmware +24 more +26 morePotential buffer overflow while processing CBF frames due to lack of check of buffer length...CVE-2019-141129.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +13 more +15 morePossible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon...CVE-2019-141119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overflow can occur in function wlan firmware while copying association frame content if...CVE-2019-141109.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9607 firmware, msm8917 firmware +20 more +22 moreNull pointer dereference issue in radio interface layer due to lack of null check in sapmodule...CVE-2019-140755.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 morePossible use after free issue in pcm volume controls due to race condition exist in private data...CVE-2019-140707.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096 firmware +51 more +53 moreMultiple Read overflows issue due to improper length check while decoding tau reject/tau accept...CVE-2019-140339.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8096au firmware, mdm9205 firmware +38 more +40 moreError occurs While extracting the ipv6_header having an invalid length due to lack of length...CVE-2019-140227.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8096au firmware, apq8098 firmware +43 more +45 morePossible buffer overrun when processing EFS filename and payload sent over diag interface due to...CVE-2019-140217.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8076 firmware +52 more +54 moreMultiple Read overflows issue due to improper length check while decoding...CVE-2019-140209.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +54 more +56 moreMultiple Read overflows issue due to improper length check while decoding RAU accept/PDN...CVE-2019-140199.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096 firmware +49 more +51 morePossible out of bound array access as there is no check on carrier index passed in Snapdragon...CVE-2019-140187.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm msm8905 firmware, msm8909 firmware +22 more +24 morePossibility of null pointer deference as the array of video codecs from media info is referenced...CVE-2019-140127.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +52 more +54 moreMultiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/...CVE-2019-140119.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +47 more +49 moreDue to the use of non-time-constant comparison functions there is issue in timing side channels...CVE-2019-140075.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +13 more +15 moreOut of bound access in diag services when DCI command buffer reallocation is not done properly...CVE-2019-106257.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8096au firmware, msm8996au firmware +10 more +12 moreWhile handling the vendor command there is an integer truncation issue that could yield a buffer...CVE-2019-106247.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcn7605 firmware, qcs605 firmware +10 more +12 morePossible integer overflow can happen in host driver while processing user controlled string due...CVE-2019-106237.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm nicobar firmware, qcs405 firmware +9 more +11 moreUse after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be...CVE-2019-106217.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 morePossible buffer over read when trying to process SDP message Video media line with frame-size...CVE-2019-106109.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreOut of bound write can happen due to lack of check of array index value while calculating it. in...CVE-2019-106099.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreCopying RTCP messages into the output buffer without checking the destination buffer size which...CVE-2019-105889.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +49 more +51 moreLack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in...CVE-2019-105747.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +29 more +31 moreMissing length check before copying the data from kernel space to userspace through the copy...CVE-2019-105567.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreString error while processing non standard SIP messages received can lead to buffer overread and...CVE-2019-105519.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +30 more +32 moreWhen issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under...CVE-2019-105477.8 High
- Show moreLoading…