Integer overflow

Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710,...

Design/Logic Flaw

The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850...

CVE-2018-11950

CVE-2018-11950 concerns Qualcomm Snapdragon Mobile devices (SD 845/850) where unapproved TrustZone applications can be loaded and executed. Connected sources identify the issue as affecting Qualcomm closed‑source components and note its inclusion in Android/Partner bulletins; the CVSS indicates a...

CVE-2018-11822

A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...

CVE-2018-11824

A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660...

CVE-2018-11850

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/S...

CVE-2018-11853

Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM429,...

CVE-2017-18309

CVE-2017-18309 affects Qualcomm closed‑source components in Snapdragon Mobile (SD 845/850). A micro‑core of QMP transportation may allow a macro‑core to read from or write to arbitrary memory, enabling local memory access with high impact (CVSSv3: 7.1, HIGH). The provided sources do not specify e...

CVE-2018-11822

CVE-2018-11822 affects Qualcomm Snapdragon Mobile WLAN HOST. A possible integer overflow during memory allocation in the WLAN stack could impact devices with SD 835, SD 845, SD 850, and SDA660. Severity in the Qualcomm bulletin is listed as High for WLAN HOST; exploitation status is not provided ...

CVE-2018-11951

CVE-2018-11951 describes an improper access control in the Snapdragon Mobile core module where XBL_LOADER clears the ZI region for QTEE instead of XBL_SEC. Affected are devices with SD 845 and SD 850. The CVE entry comes from NVD with a medium to high impact (integrity impact HIGH) and local atta...

CVE-2018-11824

CVE-2018-11824 describes a stack-based buffer overflow in a firmware routine of Qualcomm/ Snapdragon components ( Snapdragon Mobile, Snapdragon Wear ) affecting multiple platform variants (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 835, SD 845, SD 850, SDA660). The root cause is a overflow in ...

CVE-2018-11821

Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710,...

CVE-2017-18124

CVE-2017-18124 : The description in the linked sources states that during secure boot an addition is performed on uint8 pointers, causing an overflow. This affects a broad set of Qualcomm/Snapdragon devices (e.g., FSM9055, IPQ4019, MDM9xxx, MSM/SDA/XOA families and many SD series SKUs). The conne...

CVE-2018-11849

The CVE-2018-11849 entry describes a buffer overflow caused by a missing bounds check on the out-of-range bssid parameter during scan start processing in Qualcomm Snapdragon wireless code. Affected devices/SoCs include Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear platforms across num...

CVE-2018-11846: Exposure of Sensitive Information to an Unauthorized Actor

The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850...

CVE-2018-11950: Improper Input Validation

Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850...

CVE-2018-5866: Improper Restriction of Operations within the Bounds of a Memory Buffer

While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660...

CVE-2017-18309: Improper Validation of Array Index

A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850...

CVE-2018-11824: Out-of-bounds Write

A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660...

CVE-2018-11822: Integer Overflow or Wraparound

A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660...