Qualcomm
Page 21 of 26 — Qualcomm CVEs from a corpus of 2538, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11947 | Medium | 5.5 | 2019-06-14 | The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity… |
CVE-2018-11942 | Medium | 5.5 | 2019-06-14 | Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon… |
CVE-2018-11939 | High | 7.8 | 2019-06-14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2018-11934 | High | 7.8 | 2019-06-14 | Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connec… |
CVE-2018-11929 | High | 7.8 | 2019-06-14 | Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago… |
CVE-2018-11819 | High | 7.8 | 2019-06-14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2017-8252 | Medium | 5.5 | 2019-06-14 | Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-2250 | High | 7.8 | 2019-05-24 | Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CVE-2019-2248 | High | 7.8 | 2019-05-24 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-2247 | High | 7.8 | 2019-05-24 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdrag… |
CVE-2019-2245 | Critical | 9.8 | 2019-05-24 | Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer… |
CVE-2019-2244 | Critical | 9.8 | 2019-05-24 | Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buff… |
CVE-2018-13925 | Critical | 9.8 | 2019-05-24 | Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issu… |
CVE-2018-13920 | High | 7.8 | 2019-05-24 | Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapd… |
CVE-2018-13899 | High | 7.8 | 2019-05-24 | Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2018-13895 | High | 7.8 | 2019-05-24 | Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdra… |
CVE-2018-13887 | Critical | 9.8 | 2019-05-24 | Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… |
CVE-2018-13886 | Critical | 9.8 | 2019-05-24 | Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Con… |
CVE-2018-13885 | Medium | 5.5 | 2019-05-24 | Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CVE-2018-12013 | High | 7.8 | 2019-05-24 | Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electr… |
CVE-2018-12012 | High | 7.8 | 2019-05-24 | While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be compromised in Snapdr… |
CVE-2018-12005 | Medium | 5.5 | 2019-05-24 | An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT… |
CVE-2018-12004 | Medium | 5.5 | 2019-05-24 | Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Con… |
CVE-2018-11976 | Medium | 5.5 | 2019-05-24 | ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CVE-2018-11968 | High | 7.8 | 2019-05-24 | Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electro… |
CVE-2018-11967 | High | 7.8 | 2019-05-24 | Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocat… |
CVE-2018-11953 | Critical | 9.8 | 2019-05-24 | While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer E… |
CVE-2018-11949 | Critical | 9.8 | 2019-05-24 | Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2018-11940 | Critical | 9.8 | 2019-05-24 | Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2018-11937 | Critical | 9.8 | 2019-05-24 | Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2018-11936 | Critical | 9.8 | 2019-05-24 | Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access. in Snapd… |
CVE-2018-11930 | Critical | 9.8 | 2019-05-24 | Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in… |
CVE-2018-11928 | High | 7.8 | 2019-05-24 | Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2018-11927 | High | 7.8 | 2019-05-24 | Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdrag… |
CVE-2018-11925 | High | 7.8 | 2019-05-24 | Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2018-11924 | High | 7.8 | 2019-05-24 | Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El… |
CVE-2018-11923 | High | 7.8 | 2019-05-24 | Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute… |
CVE-2018-11271 | Critical | 9.8 | 2019-05-24 | Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… |
CVE-2017-18279 | High | 7.8 | 2019-05-06 | Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FS… |
CVE-2017-18278 | High | 7.8 | 2019-05-06 | An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the segmen… |
CVE-2017-18276 | High | 7.8 | 2019-05-06 | Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mobile, Snapdragon Wea… |
CVE-2017-18275 | Medium | 5.5 | 2019-05-06 | A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206… |
CVE-2017-18274 | High | 7.8 | 2019-05-06 | While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater th… |
CVE-2017-18173 | High | 7.8 | 2019-05-06 | In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430… |
CVE-2017-18157 | High | 7.8 | 2019-05-06 | A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM… |
CVE-2017-18156 | High | 7.8 | 2019-05-06 | While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206… |
CVE-2017-18131 | High | 7.8 | 2019-05-06 | In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD 210/SD 21… |
CVE-2017-15841 | Medium | 5.5 | 2019-05-06 | When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD… |
CVE-2018-13918 | High | 7.8 | 2019-04-04 | kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snap… |
CVE-2018-11971 | Medium | 5.5 | 2019-04-04 | Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdrago… |
CVE-2018-11970 | High | 7.8 | 2019-04-04 | TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consu… |
CVE-2018-11966 | High | 7.8 | 2019-04-04 | Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT… |
CVE-2018-11958 | Medium | 5.5 | 2019-04-04 | Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Co… |
CVE-2018-11830 | High | 7.8 | 2019-04-04 | Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Ind… |
CVE-2018-5839 | High | 7.1 | 2019-02-25 | Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2018-13914 | High | 7.8 | 2019-02-25 | Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indu… |
CVE-2018-13913 | High | 7.8 | 2019-02-25 | Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2018-13912 | Medium | 5.5 | 2019-02-25 | Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag… |
CVE-2018-13905 | High | 7.8 | 2019-02-25 | KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon In… |
CVE-2018-13904 | Critical | 9.8 | 2019-02-25 | Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El… |
CVE-2018-13900 | High | 7.8 | 2019-02-25 | Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra… |
CVE-2018-11948 | Medium | 5.5 | 2019-02-25 | Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Com… |
CVE-2018-11945 | Critical | 9.8 | 2019-02-25 | Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdrag… |
CVE-2018-11938 | High | 7.8 | 2019-02-25 | Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2018-11935 | Medium | 5.3 | 2019-02-25 | Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2018-11932 | Critical | 9.1 | 2019-02-25 | Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2018-11931 | High | 7.8 | 2019-02-25 | Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect… |
CVE-2018-11864 | Medium | 5.5 | 2019-02-25 | Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… |
CVE-2018-11845 | Medium | 5.5 | 2019-02-25 | Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2018-11820 | Medium | 5.5 | 2019-02-25 | Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute… |
CVE-2018-11289 | High | 7.8 | 2019-02-25 | Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapd… |
CVE-2018-13888 | High | 7.8 | 2019-02-11 | There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdrag… |
CVE-2018-11899 | High | 7.8 | 2019-02-11 | While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2018-11888 | High | 7.8 | 2019-02-11 | Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2018-11855 | High | 7.8 | 2019-02-11 | If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdra… |
CVE-2018-11847 | High | 7.8 | 2019-02-11 | Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromis… |
CVE-2018-5915 | Critical | 9.8 | 2019-01-18 | Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650… |
CVE-2018-5881 | High | 8.8 | 2019-01-18 | Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in… |
CVE-2018-5880 | High | 7.8 | 2019-01-18 | Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM92… |
CVE-2018-5879 | High | 8.8 | 2019-01-18 | Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/… |
CVE-2018-5869 | High | 7.8 | 2019-01-18 | Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MS… |
CVE-2018-5868 | High | 7.8 | 2019-01-18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 45… |
CVE-2018-5867 | High | 7.8 | 2019-01-18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM960… |
CVE-2018-3595 | Medium | 5.5 | 2019-01-18 | Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile a… |
CVE-2018-11999 | Medium | 5.5 | 2019-01-18 | Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM96… |
CVE-2018-11998 | High | 7.5 | 2019-01-18 | While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versi… |
CVE-2018-11993 | High | 8.8 | 2019-01-18 | Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607 |
CVE-2018-11288 | High | 7.8 | 2019-01-18 | Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon aut… |
CVE-2018-11284 | Critical | 9.3 | 2019-01-18 | Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdra… |
CVE-2018-11279 | High | 8.8 | 2019-01-18 | Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in… |
CVE-2017-8276 | High | 7.8 | 2019-01-18 | Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, S… |
CVE-2017-18332 | Medium | 5.5 | 2019-01-18 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607… |
CVE-2017-18331 | High | 7.8 | 2019-01-18 | Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM899… |
CVE-2017-18160 | Critical | 9.8 | 2019-01-18 | AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions M… |
CVE-2017-18330 | High | 7.8 | 2019-01-03 | Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074… |
CVE-2017-18329 | High | 7.8 | 2019-01-03 | Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645… |
CVE-2017-18328 | High | 7.8 | 2019-01-03 | Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM965… |
CVE-2017-18327 | Medium | 5.5 | 2019-01-03 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607… |
CVE-2017-18326 | Medium | 5.5 | 2019-01-03 | Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM96… |
CVE-2017-18324 | Medium | 5.5 | 2019-01-03 | Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M… |