CVE-2017-18312

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdragon Mobile in version MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820, SD 820A...

CVE-2017-18305

CVE-2017-18305 affects Qualcomm Snapdragon components (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 835). The XBL secure memory dump system call can unlock all XPUs to gain complete control of EL3 if the enable fuse is not blown, representing local privilege escalation with full confidentiality,...

CVE-2017-18170

Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636,...

CVE-2017-18300

CVE-2017-18300 affects Qualcomm closed‑source components used in Snapdragon Mobile/Wear (MDM9206/MDM9607/MDM9650, SD 210/212/205, SD 835, SDA660). The description indicates a local information‑disclosure flaw where secure display content could be exposed to a third‑party trusted application after...

CVE-2017-18295

Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20...

CVE-2017-18297

Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820...

CVE-2017-18277

CVE-2017-18277 describes a memory allocation failure in Qualcomm closed‑source components (Snapdragon Auto/Mobile/Wear) across multiple SD/SoC generations (e.g., SD 210/212/205, 625, 650, 810, 820, 835; MDM9xxx, QCN5502, etc.). The bug behavior is that when dynamic memory allocation fails, the pr...

CVE-2017-18312

CVE-2017-18312 affects Qualcomm Snapdragon SoCs (MSM8996AU; SD 410/12, SD 617, SD 650/52, SD 810, SD 820, SD 820A). Root cause: SafeSwitch state transitions are not checked consistently, enabling a third party to manipulate a device during SafeSwitch operations and perform unauthorized operations...

CVE-2017-18283

Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660...

CVE-2017-18282

Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18293

Overview: CVE-2017-18293 describes a local vulnerability in Qualcomm/Snapdragon GPIO handling where blocking access to GPIO resource registers can be bypassed via banked GPIO registers, affecting Snapdragon Mobile and Snapdragon Wear devices (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 425, SD ...

CVE-2017-18293

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 43...

CVE-2017-18295

CVE-2017-18295 describes a possible buffer overflow in the DSP Service module across Snapdragon platforms (Automobile, Mobile, Wear) for various Qualcomm SoCs (MDM9206/9607/9650, MSM8909W/8996AU, SD family up to SD835/SDX20). Root cause: input that is not null terminated may overflow a buffer, po...

CVE-2018-15387

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...

CVE-2018-0432

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting applicatio...

CVE-2018-0434

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-0433

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

CVE-2018-0433

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

Input validation

A vulnerability in the command-line interface CLI in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...