Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear vulnerabilities, page 5

94 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2017-18311qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +35 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearXPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016.EPSS0.21%7.8HighCVE-2017-18280qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +21 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, Snapdragon_High_Med_2016, when a Trusted Application has opened the SPI/I2C interface to a particular device, it is possible for another Trusted Application to read the data on this open interface by calling the SPI/I2C read function.EPSS0.25%10CriticalCVE-2017-18140qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, when processing a call disconnection, there is an attempt to print the RIL token-id to the debug log. If eMBMS service is enabled while processing the call disconnect, a Use After Free condition may potentially occur.EPSS1.25%5.5MediumCVE-2017-18299qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +19 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearImproper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660EPSS0.25%7.8HighCVE-2017-18303qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +26 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearWhile processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDA660, SDX20.EPSS0.28%10CriticalCVE-2017-18146qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +28 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, in some corner cases, ECDSA signature verification can fail.EPSS0.91%5.5MediumCVE-2017-18332qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +28 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130EPSS0.23%10CriticalCVE-2017-18130qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +22 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while playing an ASF file, a buffer over-read can potentially occur.EPSS1.25%5.5MediumCVE-2017-18323qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +35 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearCryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130.EPSS0.21%7.8HighCVE-2017-18296qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +24 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearAccess control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.EPSS0.26%7.5HighCVE-2017-18073qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +9 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, the HLOS can gain access to unauthorized memory.EPSS0.84%5.5MediumCVE-2017-18327qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +28 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearSecurity keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130.EPSS0.23%7.8HighCVE-2017-18295qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +19 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearPossible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20.EPSS0.28%7.8HighCVE-2017-8276qualcomm, inc. · snapdragon automobile, snapdragon mobile, snapdragon wear +33 morequalcomm, inc. snapdragon automobile, snapdragon mobile, snapdragon wearImproper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.EPSS0.19%