Qualcomm Sd 450 vulnerabilities, page 5
398 vulnerabilities
Known vulnerabilities in Qualcomm Sd 450, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2018-5868qualcomm, inc. · snapdragon automobile, snapdragon mobile +16 morequalcomm, inc. snapdragon automobile, snapdragon mobileLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130EPSS0.26%CriticalCVE-2018-5882qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.73%HighCVE-2018-5892qualcomm, inc. · snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon mobile, snapdragon wearThe Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.EPSS0.85%HighCVE-2018-5874qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.82%HighCVE-2018-5881qualcomm, inc. · snapdragon mobile, snapdragon wear +16 morequalcomm, inc. snapdragon mobile, snapdragon wearImproper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660EPSS0.43%HighCVE-2018-5867qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +38 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130EPSS0.26%HighCVE-2018-5914qualcomm, inc. · snapdragon mobile, snapdragon wear +14 morequalcomm, inc. snapdragon mobile, snapdragon wearImproper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.EPSS0.21%MediumCVE-2018-5894qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearImproper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.EPSS0.84%HighCVE-2018-5876qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.82%HighCVE-2018-5879qualcomm, inc. · snapdragon mobile, snapdragon wear +16 morequalcomm, inc. snapdragon mobile, snapdragon wearImproper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660EPSS0.43%MediumCVE-2018-12005qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +35 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesAn unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150EPSS0.18%CriticalCVE-2018-3590qualcomm, inc. · snapdragon mobile, snapdragon wear +14 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, a Use After Free condition can occur in RIL while handling requests from Android.EPSS1.19%MediumCVE-2018-3595qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearAnti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130EPSS0.20%CriticalCVE-2018-3594qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.EPSS1.25%CriticalCVE-2018-3593qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +25 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, repeated enable/disable eMBMS requests may result in a double free condition.EPSS1.25%CriticalCVE-2018-3592qualcomm, inc. · snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if the pointer has been reset to NULL or not, before writing to the memory pointed by the pointer.EPSS1.19%CriticalCVE-2018-3591qualcomm, inc. · snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the default build configuration of deviceprogrammer in BOOT.BF.3.0 enables the flag SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM which will open up the peek and poke commands to any memory location on the target.EPSS1.19%CriticalCVE-2015-9148qualcomm, inc. · snapdragon automobile, snapdragon mobile +24 morequalcomm, inc. snapdragon automobile, snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD 450, SD 600, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, in the Diag User-PD command registration function, a length variable used during buffer allocation is not checked, so if it is very large, an integer overflow followed by a buffer overflow occurs.EPSS1.34%MediumCVE-2015-9218qualcomm, inc. · snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, when processing bad HEVC clips, the DPB fills, and with no error handling for DPB being full, a hang occurs.EPSS0.18%HighCVE-2015-9193qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, improper input validation could cause a memory overread and cause the app to crash.EPSS0.84%