Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear vulnerabilities, page 2

94 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2018-11999qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearImproper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, SDX24EPSS0.21%7.8HighCVE-2018-5838qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +26 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearImproper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.EPSS0.20%7.5HighCVE-2018-5837qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +28 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests is not done properly due to a flawed RNG which produced repeating output much earlier than expected.EPSS0.63%6.5MediumCVE-2018-5871qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +31 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests (for privacy reasons) is not done properly due to a flawed RNG which produces repeating output much earlier than expected.EPSS0.28%9.8CriticalCVE-2018-5878qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +12 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.EPSS0.93%10CriticalCVE-2018-5915qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearException in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130EPSS1.27%7.8HighCVE-2018-5918qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +30 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearPossible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.EPSS0.21%7.8HighCVE-2018-5877qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +16 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20.EPSS0.24%7.8HighCVE-2018-5867qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +38 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearLack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130EPSS0.26%5.5MediumCVE-2018-3595qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearAnti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130EPSS0.20%10CriticalCVE-2018-3594qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.EPSS1.25%7.8HighCVE-2018-3588qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +11 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearThere is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660.EPSS0.21%10CriticalCVE-2018-3593qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +25 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, repeated enable/disable eMBMS requests may result in a double free condition.EPSS1.25%10CriticalCVE-2015-9184qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +23 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835, lack of length checking in wv_dash_core_load_keys_v8() could lead to a buffer overflow vulnerability.EPSS1.35%10CriticalCVE-2015-9181qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +23 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835, in a crypto API function, a buffer over-read can occur.EPSS1.25%10CriticalCVE-2015-9192qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +26 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, out of bounds memory access vulnerability may occur in the content protection manager due to improper validation of incoming messages.EPSS1.19%10CriticalCVE-2015-9187qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +25 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of buffer length validation in pvr_cmd_handler leads to unauthorized access to secure memory.EPSS1.19%10CriticalCVE-2015-9153qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +28 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a DRM function, a buffer over-read can occur.EPSS1.19%10CriticalCVE-2015-9145qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +26 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, lack of input validation in NPA driver functions leads to null pointer dereference.EPSS1.38%10CriticalCVE-2015-9160qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +29 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, integer overflow may occur when values passed from HLOS (graphics driver busy time, and total time) in TZBSP_GFX_DCVS_UPDATE_ID are very large.EPSS1.24%