Skip to contentQualcomm Sm8250 vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +30 more +32 moreUnhandled paging request is observed due to dereferencing an already freed object because of race...CVE-2019-140727.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +19 more +21 moreOut of bound access in msm routing due to lack of check of size before accessing in Snapdragon...CVE-2019-140687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 moreNull-pointer dereference can occur while accessing the segment element info when it is not...CVE-2019-140617.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +32 more +34 moreMemory use after free issue in audio due to lack of resource control in Snapdragon Auto,...CVE-2019-140327.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreBuffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than...CVE-2019-140319.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +10 more +12 moreThe size of a buffer is determined by addition and multiplications operations that have the...CVE-2019-140307.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +31 more +33 moreUse-after-free in graphics module due to destroying already queued syncobj in error case in...CVE-2019-140297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreBuffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto,...CVE-2019-140287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 morePossible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data...CVE-2019-140267.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreLack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO...CVE-2019-140007.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, mdm9650 firmware +15 more +17 moreUTCB object has a function pointer called by the reaper to deallocate its memory resources and...CVE-2019-106129.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +26 more +28 morePossibility of heap-buffer-overflow during last iteration of loop while populating image version...CVE-2019-106047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreNull pointer dereference can happen when parsing udta atom which is non-standard and having...CVE-2019-105917.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreImproper input validation while processing SIP URI received from the network will lead to buffer...CVE-2019-105779.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8096 firmware, apq8096au firmware +35 more +37 moreBuffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during...CVE-2019-105469.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq6018 firmware +18 more +20 moreOut of bound access due to Invalid inputs to dapm mux settings which results into kernel failure...CVE-2019-140639.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 moreUninitialized stack data gets used If memory is not allocated for blob or if the allocated blob...CVE-2019-140607.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreBuffer Over read of codec private data while parsing an mkv file due to lack of check of buffer...CVE-2019-140579.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 morePossibility of use-after-free and double free because of not marking buffer as NULL after freeing...CVE-2019-140557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreDuring listener modified response processing, a buffer overrun occurs due to lack of buffer size...CVE-2019-14041Public exploit7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +27 more +29 moreAPKs without proper permission may bind to CallEnhancementService and can lead to unauthorized...CVE-2019-140027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreOut of bound access while parsing dts atom, which is non-standard as it does not have valid...CVE-2019-105909.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreThere is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer...CVE-2019-105677.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 moreUse after free while processing eeprom query as there is a chance to not unlock mutex after error...CVE-2019-140347.8 High
- qualcomm, inc. snapdragon auto, snapdragon industrial iot, snapdragon mobile, qualcomm msm8917 firmware, msm8953 firmware +15 more +17 morePossible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto,...CVE-2019-140247.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +8 more +10 moreString format issue will occur while processing HLOS data as there is no user input validation to...CVE-2019-140237.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreHeap buffer overflow can occur while parsing invalid MKV clip which is not standard and have...CVE-2019-140179.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreInteger overflow occurs while playing the clip which is nonstandard in Snapdragon Auto,...CVE-2019-140169.8 Critical
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm nicobar firmware, sdm670 firmware +6 more +8 morePossible buffer overflow when byte array receives incorrect input from reading source as array is...CVE-2019-140149.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreWhile parsing invalid super index table, elements within super index table may exceed total chunk...CVE-2019-140139.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +9 more +11 moreThe device may enter into error state when some tool or application gets failure at 1st buffer...CVE-2019-140107.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9607 firmware +6 more +8 morePossible null pointer dereference issue in location assistance data processing due to missing...CVE-2019-140087.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer overflow occur while playing the clip which is nonstandard due to lack of offset length...CVE-2019-140069.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreBuffer overflow occur while playing the clip which is nonstandard due to lack of check of size...CVE-2019-140059.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreBuffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in...CVE-2019-140049.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreNull pointer exception can happen while parsing invalid MKV clip where cue information is parsed...CVE-2019-140037.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreBuffer overflow can occur while processing clip due to lack of check of object size before...CVE-2019-106119.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 morePossible integer overflow happens when mmap find function will increment refcount every time when...CVE-2019-105857.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, mdm9607 firmware +14 more +16 moreUse after free issue occurs when camera access sensors data through direct report mode in...CVE-2019-105837.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, mdm9607 firmware +14 more +16 moreUse after free issue due to using of invalidated iterator to delete an object in sensors HAL in...CVE-2019-105827.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +26 more +28 moreNULL is assigned to local instance of audio device pointer after free instead of global static...CVE-2019-105819.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreBuffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto,...CVE-2019-105799.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 moreNull pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto...CVE-2019-105787.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreWhile transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data...CVE-2019-105587.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreNull-pointer dereference issue can occur while calculating string length when source string...CVE-2019-105329.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 moreOut of boundary access is possible as there is no validation of data accessed against the...CVE-2019-106149.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 moreUse of local variable as argument to netlink CB callback goes out of it scope when callback...CVE-2019-106007.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 morePossibility of out of bound access in debug queue, if packet size field is corrupted in...CVE-2019-105847.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +24 more +26 morePossible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of...CVE-2019-105647.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreImproper length check on source buffer to handle userspace data received can lead to out-of-bound...CVE-2019-105447.8 High
- Show moreLoading…