Qualcomm Msm8996Au vulnerabilities, page 5
730 vulnerabilities
Known vulnerabilities in Qualcomm Msm8996Au, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2018-5838qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +26 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearImproper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.EPSS0.20%HighCVE-2018-5913qualcomm · mdm9150_firmware +50 morequalcomm mdm9150_firmwareA non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130EPSS0.21%HighCVE-2018-5837qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +28 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests is not done properly due to a flawed RNG which produced repeating output much earlier than expected.EPSS0.63%HighCVE-2018-5883qualcomm, inc. · snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music +18 morequalcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & musicBuffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24EPSS0.23%HighCVE-2018-5912qualcomm, inc. · snapdragon automobile, snapdragon mobile +9 morequalcomm, inc. snapdragon automobile, snapdragon mobilePotential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660EPSS0.23%MediumCVE-2018-5916qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +35 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearBuffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.EPSS0.37%MediumCVE-2018-5871qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +31 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests (for privacy reasons) is not done properly due to a flawed RNG which produces repeating output much earlier than expected.EPSS0.28%HighCVE-2018-5875qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.78%HighCVE-2018-5917qualcomm, inc. · snapdragon automobile, snapdragon mobile +14 morequalcomm, inc. snapdragon automobile, snapdragon mobilePossible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.EPSS0.26%HighCVE-2018-5911qualcomm, inc. · snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile +20 morequalcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobileBuffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24EPSS0.22%CriticalCVE-2018-5885qualcomm, inc. · snapdragon mobile, snapdragon wear +12 morequalcomm, inc. snapdragon mobile, snapdragon wearWhile loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.EPSS0.96%HighCVE-2018-5891qualcomm, inc. · snapdragon mobile, snapdragon wear +15 morequalcomm, inc. snapdragon mobile, snapdragon wearWhile processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear.EPSS0.22%CriticalCVE-2018-5915qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearException in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130EPSS1.27%HighCVE-2018-5918qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +30 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearPossible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.EPSS0.21%HighCVE-2018-5877qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +16 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20.EPSS0.24%HighCVE-2018-5868qualcomm, inc. · snapdragon automobile, snapdragon mobile +16 morequalcomm, inc. snapdragon automobile, snapdragon mobileLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130EPSS0.26%CriticalCVE-2018-5882qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.73%HighCVE-2018-5892qualcomm, inc. · snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon mobile, snapdragon wearThe Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.EPSS0.85%HighCVE-2018-5874qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.82%HighCVE-2018-5867qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +38 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130EPSS0.26%