Qualcomm, Inc. Snapdragon Mobile vulnerabilities, page 3

114 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. Snapdragon Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CriticalCVE-2015-9223qualcomm, inc. · snapdragon mobile +6 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio buffer.EPSS1.35%10CriticalCVE-2015-9183qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in TQS QSEE application, while parsing "Set Certificates" command an integer overflow may result in buffer overflow.EPSS0.99%10CriticalCVE-2015-9173qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, missing of return value check in memscpy can cause memory corruption in TQS App.EPSS1.16%10CriticalCVE-2015-9147qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated.EPSS1.28%7.5HighCVE-2015-9131qualcomm, inc. · snapdragon mobile +9 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, lack of input validation in qsee can lead to unauthorized memory access.EPSS0.88%10CriticalCVE-2015-9174qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of validation of the return value prior to using for buffer allocation in QSEE application, TQS, may result in memory overwrite.EPSS1.25%10CriticalCVE-2015-9065qualcomm, inc. · snapdragon mobilequalcomm, inc. snapdragon mobileIn all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Stratum security is established.EPSS1.04%10CriticalCVE-2015-9150qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, while computing the length of memory allocated for a Diag event, if the buffer length is very small or greater than the maximum, an integer overflow may occur, which later results in a buffer overflow.EPSS1.42%10CriticalCVE-2015-9219qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, an integer overflow to buffer overflow can occur in a DRM API.EPSS1.42%10CriticalCVE-2015-9179qualcomm, inc. · snapdragon mobile +1 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCrypto_DeriveKeysFromSessionKey() could lead to a buffer overflow vulnerability.EPSS1.35%10CriticalCVE-2016-10495qualcomm, inc. · snapdragon mobile +1 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, made changes to map the scan type value to an index value that is in range.EPSS1.19%10CriticalCVE-2016-10460qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 835, SD 845, and SD 850, vendor specific opcodes may not have any packet length validation leading to buffer over-reads.EPSS1.19%10CriticalCVE-2016-10461qualcomm, inc. · snapdragon mobile +7 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of proper bounds checking may lead to a buffer overread.EPSS1.19%10CriticalCVE-2016-10477qualcomm, inc. · snapdragon mobile +16 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, and SD 820, while processing smart card requests, a buffer overflow can occur.EPSS1.28%10CriticalCVE-2016-10498qualcomm, inc. · snapdragon mobile +30 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, stopping of the DTR prematurely causes micro kernel to be stuck. This can be triggered with a timing change injectable in RACH procedure.EPSS1.23%10CriticalCVE-2016-10479qualcomm, inc. · snapdragon mobile +18 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9607, MDM9615, MDM9635M, MDM9640, SD 210/SD 212/SD 205, SD 400, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 810, and SD 820, an arbitrary length value from an incoming message to QMI Proxy can lead to an out-of-bounds write in the stack variable message.EPSS1.19%10CriticalCVE-2016-10478qualcomm, inc. · snapdragon mobile +1 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 617, incorrect size calculation in QCRIL SCWS processing have Integer overflow which will lead to a buffer overflow.EPSS1.34%10CriticalCVE-2016-10475qualcomm, inc. · snapdragon mobile +16 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, and SD 820, lack input validation may lead to a integer overflow that could potentially lead to a buffer overflow.EPSS1.34%10CriticalCVE-2016-10440qualcomm, inc. · snapdragon mobile +6 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, and SD 650/52, there is improper access control to a bus.EPSS1.12%7.5HighCVE-2016-10483qualcomm, inc. · snapdragon mobile +7 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, improper input validation while processing SCM Command can lead to unauthorized memory access.EPSS0.84%