Qualcomm, Inc. Snapdragon Mobile vulnerabilities

114 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. Snapdragon Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2018-11822qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileA possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660EPSS0.24%5.5MediumCVE-2018-11951qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileImproper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 845, SD 850.EPSS0.16%7.8HighCVE-2018-11854qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileLack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660EPSS0.24%7.8HighCVE-2018-11859qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileBuffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850.EPSS0.24%7.8HighCVE-2018-11877qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileWhen the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.EPSS0.23%7.8HighCVE-2018-11856qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileImproper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850.EPSS0.26%7.8HighCVE-2018-11872qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileImproper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, SD 850, SDA660EPSS0.24%7.8HighCVE-2018-11884qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileImproper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660EPSS0.25%7.8HighCVE-2018-11874qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileBuffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.EPSS0.25%4.7MediumCVE-2018-11846qualcomm, inc. · snapdragon mobile +5 morequalcomm, inc. snapdragon mobileThe use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850EPSS0.17%7.8HighCVE-2018-11873qualcomm, inc. · snapdragon mobile +1 morequalcomm, inc. snapdragon mobileImproper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845.EPSS0.23%7.8HighCVE-2018-11882qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIncorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.EPSS0.26%7.8HighCVE-2018-11858qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileWhen processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850.EPSS0.21%7.8HighCVE-2018-11862qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileBuffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660.EPSS0.28%7.8HighCVE-2018-11875qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileLack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850.EPSS0.25%7.8HighCVE-2018-11257qualcomm, inc. · snapdragon mobile +5 morequalcomm, inc. snapdragon mobilePermissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850.EPSS0.19%7.8HighCVE-2018-11857qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileImproper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850EPSS0.21%7.8HighCVE-2018-11879qualcomm, inc. · snapdragon mobile +1 morequalcomm, inc. snapdragon mobileWhen the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845EPSS0.23%7.8HighCVE-2018-11950qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileUnapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850EPSS0.21%7.8HighCVE-2018-11867qualcomm, inc. · snapdragon mobile +1 morequalcomm, inc. snapdragon mobileLack of buffer length check before copying in WLAN function while processing FIPS event, can lead to a buffer overflow in Snapdragon Mobile in version SD 845.EPSS0.26%