Access Control Error Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-24840)

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated of the U.S. The Qualcomm MDM9206 is a central processing unit CPU.The SDX24 is a modem. An access control error vulnerability exists in the kernel of multiple Qualcomm Snapdragon products, which could be exploited by an attacke...

Google Android Qualcomm Video has an unspecified vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Video is a video component. A security vulnerability exists in Qualcomm Video in Android. No details of the vulnerability are available at this time...

Multiple Qualcomm Snapdragon Products Information Disclosure Vulnerability (CNVD-2018-25411)

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated of the U.S. The Qualcomm MDM9206 is a central processing unit CPU.The SDX24 is a modem. An information disclosure vulnerability exists in the MODEM in multiple Qualcomm Snapdragon products, which can be exploited by attackers t...

Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-25410)

The Qualcomm MSM8996AU and others are products of Qualcomm Incorporated, U.S.A. The Qualcomm MSM8996AU is a central processing unit CPU.The SDX24 is a modem. A buffer overflow vulnerability exists in the 'OEM crypto' function in multiple Qualcomm Snapdragon products, which stems from a failure to...

Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-24839)

Qualcomm MDM9206 and others are central processing unit CPU products of Qualcomm Incorporated for different platforms. A buffer overflow vulnerability exists in the Ontario fingerprinting code in various Qualcomm Snapdragon products, which can be exploited by an attacker to perform unauthorized...

Qualcomm SD 600 Buffer Overflow Vulnerability

The Qualcomm SD 600 is a central processing unit CPU product for mobile devices from Qualcomm Incorporated. A buffer overflow vulnerability exists in Core Services in the Qualcomm SD 600 for mobile devices. An attacker could exploit the vulnerability to perform unauthorized operations...

Buffer Overflow Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-25412)

Qualcomm MSM8996AU and others are central processing unit CPU products for various platforms from Qualcomm Incorporated. A buffer overflow vulnerability exists in Video in multiple Qualcomm Snapdragon products, which can be exploited by attackers to perform unauthorized operations...

Android Security Bulletin—November 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-11-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

The vulnerability of the Qualcomm operating system Android, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm operating system Android is related to deficiencies in error handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Qualcomm operating system Android component, which allows a hacker to trigger a service failure

The vulnerability of the Qualcomm Android operating system is related to errors in the watchdog timer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Buffer overflow

Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564,...

Buffer overflow

Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU,...

CVE-2017-18309

CVE-2017-18309 affects Qualcomm closed‑source components in Snapdragon Mobile (SD 845/850). A micro‑core of QMP transportation may allow a macro‑core to read from or write to arbitrary memory, enabling local memory access with high impact (CVSSv3: 7.1, HIGH). The provided sources do not specify e...

CVE-2018-11849

The CVE-2018-11849 entry describes a buffer overflow caused by a missing bounds check on the out-of-range bssid parameter during scan start processing in Qualcomm Snapdragon wireless code. Affected devices/SoCs include Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear platforms across num...

Code injection

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 80...

CVE-2017-18303

While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD...

CVE-2017-18304

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425,...

Google Patches Critical Vulnerabilities in Android OS

Google patched six critical remote code execution flaws in its Android operating system as part of its October Android Security Bulletin. Four of those remote code execution flaws are tied to Android’s Media framework and impact a wide range of Android devices including Google’s Pixel and Nexus...

CVE-2018-11277

In Snapdragon Automobile, Mobile, Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, the com.qualcomm.embms is a vendor package deployed in the system image which has an inadequat...

CVE-2017-18302

In Snapdragon Automobile ,Mobile in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SnapdragonHighMed2016, a crafted HLOS client can modify the structure in memory passed to a QSEE...