Qualcomm Sd 650 vulnerabilities, page 4
317 vulnerabilities
Known vulnerabilities in Qualcomm Sd 650, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2018-5876qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.82%CriticalCVE-2018-3590qualcomm, inc. · snapdragon mobile, snapdragon wear +14 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, a Use After Free condition can occur in RIL while handling requests from Android.EPSS1.19%MediumCVE-2018-3595qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearAnti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130EPSS0.20%CriticalCVE-2018-3594qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.EPSS1.25%CriticalCVE-2018-3593qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +25 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, repeated enable/disable eMBMS requests may result in a double free condition.EPSS1.25%CriticalCVE-2018-3592qualcomm, inc. · snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, added a change to check if the pointer has been reset to NULL or not, before writing to the memory pointed by the pointer.EPSS1.19%CriticalCVE-2018-3591qualcomm, inc. · snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the default build configuration of deviceprogrammer in BOOT.BF.3.0 enables the flag SKIP_SECBOOT_CHECK_NOT_RECOMMENDED_BY_QUALCOMM which will open up the peek and poke commands to any memory location on the target.EPSS1.19%CriticalCVE-2015-9148qualcomm, inc. · snapdragon automobile, snapdragon mobile +24 morequalcomm, inc. snapdragon automobile, snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD 450, SD 600, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, in the Diag User-PD command registration function, a length variable used during buffer allocation is not checked, so if it is very large, an integer overflow followed by a buffer overflow occurs.EPSS1.34%HighCVE-2015-9169qualcomm, inc. · snapdragon mobile, snapdragon wear +16 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, buffer over-read in QSEE app may cause confidential information to be leaked.EPSS0.88%MediumCVE-2015-9218qualcomm, inc. · snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, when processing bad HEVC clips, the DPB fills, and with no error handling for DPB being full, a hang occurs.EPSS0.18%HighCVE-2015-9193qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, improper input validation could cause a memory overread and cause the app to crash.EPSS0.84%CriticalCVE-2015-9184qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +23 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835, lack of length checking in wv_dash_core_load_keys_v8() could lead to a buffer overflow vulnerability.EPSS1.35%CriticalCVE-2015-9157qualcomm, inc. · snapdragon mobile, snapdragon wear +22 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in widevine_dash_cmd_handler(), rsp buffers are passed off to widevine commands. These rsp buffers have values in them, such as buffer lengths, that need to be validated to ensure that no buffer overflow/over-reads happen. However, rsp buffers are not always in locked memory, meaning a time-of-check, time-of-use issue can occur where we check that the value is valid, but then a race condition occurs where this memory is swapped out with a different, possibly out of range, value.EPSS1.09%CriticalCVE-2015-9158qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a QTEE crypto function, a buffer overflow can occur.EPSS1.19%CriticalCVE-2015-9181qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +23 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835, in a crypto API function, a buffer over-read can occur.EPSS1.25%CriticalCVE-2015-9142qualcomm, inc. · snapdragon mobile +26 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, bounds check is missing for vtable index in DAL-TO-QDI conversion framework.EPSS1.19%CriticalCVE-2015-9203qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +27 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation in playready_set_domainid could lead to a buffer overread.EPSS1.19%CriticalCVE-2015-9192qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +26 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, out of bounds memory access vulnerability may occur in the content protection manager due to improper validation of incoming messages.EPSS1.19%CriticalCVE-2015-9187qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +25 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of buffer length validation in pvr_cmd_handler leads to unauthorized access to secure memory.EPSS1.19%CriticalCVE-2015-9197qualcomm, inc. · snapdragon mobile, snapdragon wear +20 morequalcomm, inc. snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, when enabling XPUs for SMEM partitions, if configuration values are out of range, memory access outside the SMEM may occur and set incorrect XPU configurations.EPSS1.19%