Code injection

In Snapdragon Automobile, Mobile, Wear in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710,...

CVE-2018-11277

The CVE-2018-11277 issue affects Snapdragon devices (Automobile, Mobile, Wear) with listed MSM/SD platforms where the vendor package com.qualcomm.embms is deployed in the system image and has an inadequate permission level. This allows any app installed from the Play Store to request this permiss...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability (CNVD-2018-19597)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer overflow vulnerability exists in...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability (CNVD-2018-19599)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer overflow vulnerability exists in...

Google Android Qualcomm MProc Buffer Overflow Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm MProc is one of the U.S.-based components of Qualcomm MProc. Qualcomm MProc is one of the database operati...

Google Android Qualcomm WLAN Host Integer Overflow Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. An integer overflow vulnerability exists i...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer out-of-bounds read vulnerability...

Google Android Qualcomm WLAN Host suffers from an unspecified vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in Qualcomm WLAN Host in Android on Google Pixel and Nexus devices. No details of the...

Google Android Qualcomm WLAN Host Buffer Overflow Vulnerability (CNVD-2018-19598)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm WLAN Host is one of the Qualcomm WLAN Host is a wireless LAN component. A buffer overflow vulnerability exists in...

Android Security Bulletin—September 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Critical Flaws in Syringe Pump, Device Gateways Threaten Patient Safety

Two previously undocumented, critical vulnerabilities in widely deployed medical devices have sparked patient-safety and data-privacy concerns. Flaws in the Qualcomm Life Capsule Datacaptor Terminal Server and the Becton Dickinson BD Alaris TIVA Syringe Pump have been acknowledged by the vendors...

ICSMA-18-240-01_Qualcomm Life Capsule

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Qualcomm Life Equipment: Capsule Datacaptor Terminal Server DTS Vulnerability: Code Weakness 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-20744)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. An elevation of privilege vulnerability exists in the Qualcomm WLAN component of Android, where the received radioid is greater than or...

Google Android Qualcomm Component Elevation of Privilege Vulnerability (CNVD-2019-00122)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Qualcomm Diag driver is one of the logging system drivers. The Qualcomm Diag driver is one of the logging system...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2019-00127)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm MDSS is one of the multimedia display subsystems. A buffer overflow vulnerability exists in the Qualcomm MDSS component of Android, which stems from the...

Google Android Qualcomm component buffer overflow vulnerability (CNVD-2019-00125)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Rotator is a component. A buffer overflow vulnerability exists in the Qualcomm Rotator component of Android, which is caused by the program failing to detect the size of...

Google Android Qualcomm Component Elevation of Privilege Vulnerability (CNVD-2019-00123)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm power driver is a Qualcomm power connection driver component used in it. An elevation of privilege vulnerability exists in the Qualcomm power driver component in...

Black Hat 2018: Mixed Signal Microcontrollers Open to Side-Channel Attacks

LAS VEGAS – Mixed signal circuits – in which chips isolate digital and analog components – are opening chips up to novel side-channel attacks, researchers said at Black Hat 2018 today. As chip manufacturers search for smaller and cheaper microelectronics components, they have adopted a mixed-sign...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-18775)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm component WLAN. An attacker can exploit the vulnerability to gain elevation of privilege...

iPhone Chip Supplier TSMC Stops Production After Computer Virus Attack

Taiwan Semiconductor Manufacturing Company TSMC—Apple's sole supplier of SoC components for iPhones and iPads, and Qualcomm's major manufacturing partner—shut down several of its chip-fabrication factories Friday night after being hit by a computer virus. The world's largest makers of...