Skip to contentQualcomm Snapdragon vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +53 more +55 moreKernel can inject faults in computations during the execution of TrustZone leading to information...CVE-2017-82525.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream map from...CVE-2019-22459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearable, qualcomm mdm9206 firmware, mdm9607 firmware +39 more +41 morePossible integer underflow can happen when calculating length of elementary stream info from...CVE-2019-22449.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreError in parsing PMT table frees the memory allocated for the map section but does not reset the...CVE-2018-139259.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreUnchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon...CVE-2018-138869.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto,...CVE-2018-119765.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8064 firmware +54 more +56 moreImproper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon...CVE-2018-119687.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIndex of array is processed in a wrong way inside a while loop and result in invalid index (-1 or...CVE-2018-119369.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +40 more +42 moreImproper authentication can happen on Remote command handling due to inappropriate handling of...CVE-2018-112719.8 Critical
- qualcomm technologies, inc. small cell soc, snapdragon mobile, snapdragon wear, qualcomm fsm9055 firmware, fsm9955 firmware +37 more +39 moreLack of check of buffer length before copying can lead to buffer overflow in camera module in...CVE-2017-182797.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 425 firmware, sd 427 firmware +11 more +13 moreIn case of using an invalid android verified boot signature with very large length, an integer...CVE-2017-181737.8 High
- qualcomm technologies, inc. snapdragon mobile, qualcomm sd 410 firmware, sd 412 firmware +14 more +16 moreWhen HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in...CVE-2017-158415.5 Medium
- qualcomm technologies inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +26 more +28 moreIn QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile,...CVE-2017-181317.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +40 more +42 moreUndefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto,...CVE-2018-119667.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreInsufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad...CVE-2018-119585.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9615 firmware +28 more +30 moreImproperly configured memory protection allows read/write access to modem image from HLOS kernel...CVE-2018-58397.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreLack of input validation for data received from user space can lead to an out of bound array...CVE-2018-139147.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...CVE-2018-139137.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreArbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon...CVE-2018-139125.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs605 firmware +28 more +30 moreExceeding the limit of usage entries are not tracked and the information will be lost causing the...CVE-2018-119485.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreImproper input validation in wireless service messaging module for data received from broadcast...CVE-2018-119459.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +43 more +45 moreImproper input validation for argument received from HLOS can lead to buffer overflows and...CVE-2018-119387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto,...CVE-2018-119317.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreBytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon...CVE-2018-118645.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreUsage of non-time-constant comparison functions can lead to information leakage through side...CVE-2018-118455.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreUse of non-time constant memcmp function creates side channel that leaks information and leads to...CVE-2018-118205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreData truncation during higher to lower type conversion which causes less memory allocation than...CVE-2018-112897.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 moreUnauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from...CVE-2018-118887.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 moreMalicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory...CVE-2018-118477.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile,...CVE-2018-58677.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +13 more +15 moreWhile processing a packet decode request in MQTT, Race condition can occur leading to an out-of...CVE-2018-119987.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +44 more +46 moreLack of check of input size can make device memory get corrupted because of buffer overflow in...CVE-2018-112798.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996au firmware +31 more +33 moreImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile...CVE-2017-82767.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +37 more +39 moreBuffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon...CVE-2017-183307.8 High
- qualcomm mdm9615 firmware, mdm9625 firmware, mdm9635m firmware +35 more +37 morePossible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon...CVE-2017-183297.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +22 more +24 moreUse after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions...CVE-2017-183287.8 High
- qualcomm mdm9607 firmware, mdm9615 firmware, mdm9625 firmware +32 more +34 moreCryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear...CVE-2017-183265.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +30 more +32 moreCryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon...CVE-2017-183245.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +29 more +31 moreCryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon...CVE-2017-183225.5 Medium
- qualcomm msm8996au firmware, sd 410 firmware, sd 412 firmware +30 more +32 moreQSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in...CVE-2017-183207.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +28 more +30 moreInformation leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions...CVE-2017-183195.5 Medium
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +32 more +34 moreWhen a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure...CVE-2017-181417.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +35 more +37 moreA non-secure user may be able to access certain registers in snapdragon automobile, snapdragon...CVE-2017-110045.5 Medium
- qualcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wear, qualcomm ipq4019 firmware, ipq8064 firmware +47 more +49 moreBuffer overwrite can happen in WLAN function while processing set pdev parameter command due to...CVE-2018-118717.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm ipq8074 firmware, mdm9206 firmware +23 more +25 moreInteger overflow may happen in WLAN when calculating an internal structure size due to lack of...CVE-2018-118667.8 High
- qualcomm, inc. snapdragon mobile, snapdragon wear, qualcomm mdm9206 firmware, mdm9607 firmware +22 more +24 moreInteger overflow may happen when calculating an internal structure size due to lack of validation...CVE-2018-118657.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +37 more +39 moreIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650,...CVE-2018-112677.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +25 more +27 moreThe Touch Pal application can collect user behavior data without awareness by the user in...CVE-2018-58927.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9635m firmware +36 more +38 moreDue to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and...CVE-2018-112597.7 High