Qualcomm, Inc. Snapdragon Mobile vulnerabilities, page 5

114 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. Snapdragon Mobile, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CriticalCVE-2014-10056qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, A buffer overflow can potentially occur in any OpenCL application that calls clBuildProgram() with a device of type CL_DEVICE_TYPE_CPU in its device_list argument.EPSS1.28%7.5HighCVE-2014-10058qualcomm, inc. · snapdragon mobile +15 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, unauthorized users can potentially modify system time.EPSS0.66%10CriticalCVE-2014-10057qualcomm, inc. · snapdragon mobile +14 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and Snapdragon_High_Med_2016, binary Calibration files under data/misc/audio have 777 permissions.EPSS1.19%10CriticalCVE-2014-10039qualcomm, inc. · snapdragon mobile +3 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800, calling qsee_app_entry_return() without first calling qsee_app_entry() will cause the stack to be restored to an older state resulting in a return to an unexpected location.EPSS1.19%7.5HighCVE-2014-10047qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur.EPSS0.60%10CriticalCVE-2014-10046qualcomm, inc. · snapdragon mobile +15 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the corresponding active timer.EPSS1.19%7.5HighCVE-2014-10055qualcomm, inc. · snapdragon mobile +2 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, there could be leakage of protected contents if HLOS doesn't request for security restoration for OCMEM xPU's.EPSS0.84%7.5HighCVE-2014-10044qualcomm, inc. · snapdragon mobile +10 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound.EPSS0.66%10CriticalCVE-2014-10059qualcomm, inc. · snapdragon mobile +7 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge.EPSS1.12%10CriticalCVE-2014-10050qualcomm, inc. · snapdragon mobile +6 morequalcomm, inc. snapdragon mobileIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8996, MSM8939, MSM8976, MSM8917, SDM845, and SDM660, access control collision vulnerability when accessing the replay protected memory block.EPSS1.12%7.5HighCVE-2022-25689qualcomm, inc. · snapdragon mobile +9 morequalcomm, inc. snapdragon mobileDenial of service in Modem due to reachable assertion in Snapdragon MobileEPSS0.43%8.8HighCVE-2022-25750qualcomm, inc. · snapdragon mobile +15 morequalcomm, inc. snapdragon mobileMemory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon MobileEPSS0.14%8.4HighCVE-2022-25723qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileMemory corruption in multimedia due to use after free during callback registration failure in Snapdragon MobileEPSS0.12%7.5HighCVE-2022-25691qualcomm, inc. · snapdragon mobile +24 morequalcomm, inc. snapdragon mobileDenial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon MobileEPSS0.43%7.5HighCVE-2022-25673qualcomm, inc. · snapdragon mobile +14 morequalcomm, inc. snapdragon mobileDenial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon MobileEPSS0.43%7.5HighCVE-2022-25672qualcomm, inc. · snapdragon mobile +24 morequalcomm, inc. snapdragon mobileDenial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon MobileEPSS0.43%7.5HighCVE-2022-25671qualcomm, inc. · snapdragon mobile +14 morequalcomm, inc. snapdragon mobileDenial of service in MODEM due to reachable assertion in Snapdragon MobileEPSS0.47%8.4HighCVE-2022-22077qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileMemory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon MobileEPSS0.14%7.8HighCVE-2022-33217qualcomm, inc. · snapdragon mobile +8 morequalcomm, inc. snapdragon mobileMemory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon MobileEPSS0.12%10CriticalCVE-2017-14915qualcomm, inc. · snapdragon mobile +4 morequalcomm, inc. snapdragon mobileIn Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.EPSS1.62%