Qualcomm, Inc. Snapdragon Mobile vulnerabilities, page 2

114 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. Snapdragon Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2018-11880qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIncorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.EPSS0.24%7.8HighCVE-2018-11876qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileLack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.EPSS0.25%7.8HighCVE-2018-11861qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileBuffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660.EPSS0.28%7.8HighCVE-2018-11828qualcomm, inc. · snapdragon mobile +9 morequalcomm, inc. snapdragon mobileWhen FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52EPSS1.12%7.8HighCVE-2018-5870qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileWhile loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24.EPSS0.24%10CriticalCVE-2018-3589qualcomm, inc. · snapdragon mobile +5 morequalcomm, inc. snapdragon mobileIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr capture size is larger than the maximum size of a diag logPacket, which can lead to a buffer overflow when the sample buffer is copied to the logPacket buffer.EPSS1.28%10CriticalCVE-2015-9066qualcomm, inc. · snapdragon mobilequalcomm, inc. snapdragon mobileIn all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.EPSS1.13%10CriticalCVE-2015-9118qualcomm, inc. · snapdragon mobile +12 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrusted arguments from User PD may cause integer overflow resulting in buffer overflow.EPSS1.33%10CriticalCVE-2015-9142qualcomm, inc. · snapdragon mobile +26 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, bounds check is missing for vtable index in DAL-TO-QDI conversion framework.EPSS1.19%10CriticalCVE-2015-9146qualcomm, inc. · snapdragon mobile +10 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing it for the delayed response.EPSS1.19%10CriticalCVE-2015-9063qualcomm, inc. · snapdragon mobilequalcomm, inc. snapdragon mobileIn all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.EPSS1.13%7.5HighCVE-2015-9134qualcomm, inc. · snapdragon mobile +6 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qsee_macc_gen_ecc_privkey', untrusted pointer dereference occurs, which could result in arbitrary write.EPSS0.70%10CriticalCVE-2015-9162qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the function "Certificate_CreateWithBuffer" in the QSEE app TQS, in case of memory allocation failure, we free the memory and return the pointer without setting it to NULL.EPSS1.07%10CriticalCVE-2015-9195qualcomm, inc. · snapdragon mobile +16 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9650, MDM9655, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, SD 810, and SDX20, in a QTEE syscall handler, HLOS can cause a buffer overflow to occur.EPSS1.28%10CriticalCVE-2015-9215qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader find_ep() function.EPSS1.38%7.5HighCVE-2015-9194qualcomm, inc. · snapdragon mobile +15 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, during module load at TZ Startup, memory statically allocated by modules was not being properly set to zero first. Allowing the module to execute without reset gives it access to information from previous app thus leading to information exposure.EPSS0.84%10CriticalCVE-2015-9151qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated.EPSS1.28%10CriticalCVE-2015-9221qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference.EPSS1.25%9.1CriticalCVE-2015-9124qualcomm, inc. · snapdragon mobile +16 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, the device may crash while accessing an invalid pointer or expose otherwise inaccessible memory contents.EPSS1.01%10CriticalCVE-2015-9133qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 617, SD 650/52, SD 800, and SD 810, if Widevine App TZ_WV_CMD_DECRYPT_VIDEO is called with a size too large, an integer overflow may occur.EPSS1.31%