CVE-2018-5879

Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660...

CVE-2018-5868

Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130...

CVE-2018-5880

The CVE-2018-5880 entry affects Qualcomm Snapdragon devices (mobile and wear) across multiple chips (e.g., MDM9206, MDM9607, SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SDA660, SDM630, SDM660). The vulnerability stems from an improper data length check when processing an event report ...

CVE-2018-5915

CVE-2018-5915 : Exception in the Modem IP stack while processing IPv6 packets affects Qualcomm/Qualcomm-based Snapdragon automotive, mobile, and wearables platforms (MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/212/205, SD 425, SD 430, SD 712/710/670, SD 820/820A/835/845/850, SDA660, SD...

CVE-2018-11284

CVE-2018-11284 describes a vulnerability where spoofed SMS can trigger a flood of registration updates to the server on devices using Qualcomm Snapdragon mobile and Snapdragon Wear platforms (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20). The underlying...

CVE-2018-11999

Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660,...

CVE-2018-5915

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660,...

CVE-2017-18332

Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 71...

CVE-2018-5881

Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660...

CVE-2018-11993

Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607...

CVE-2018-5867

Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625...

CVE-2018-5869

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

CVE-2017-8276

Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD...

CVE-2018-5881

CVE-2018-5881 is a buffer-length validation flaw in the LwM2M device management protocol that can lead to a buffer overflow on Snapdragon platforms. Affected are Snapdragon Mobile and Wear devices across MDM9206, MDM9607, and SD variants: SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SD...

CVE-2018-3595

CVE-2018-3595 affects Qualcomm Snapdragon platforms (automobile/mobile/wear) across multiple SoCs (e.g., MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/212/205, 425, 430, 450, 625, 650/52, 712/710/670, 820/820A, 835/845/850, 660, SDX24, SXR1130). The vulnerability arises from improper error handlin...

CVE-2018-5867

CVE-2018-5867 relates to a buffer overflow caused by lack of input-size checking in WideVine on Qualcomm/Snapdragon platforms (automotive, mobile, wearables). Affected products include a broad list of Snapdragon/SDM/SDX devices (e.g., MDM9206, MDM9607, SD 210–SD 850 families, SDX24, Snapdragon_Hi...

CVE-2018-5869

CVE-2018-5869 concerns improper input validation in the QTEE keymaster app, leading to invalid memory access on Qualcomm Snapdragon mobile/wear platforms. Affected are devices using several Snapdragon families (e.g., MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 410/12, SD 615/16/SD 415, SD 800,...

CVE-2018-11999

CVE-2018-11999 concerns improper input validation in TrustZone that can cause a denial of service on Qualcomm Snapdragon platforms (automotive, mobile, wearable). Affected components are Qualcomm/TrustZone implementations across multiple Snapdragon SoCs (e.g., MDM9206, MDM9607, MDM9635M, MDM9650,...

CVE-2018-11288

CVE-2018-11288 describes a potential undefined behavior caused by a missing size check in a function parameter segment_idx, which can lead to a read outside the intended region. Affected products are Qualcomm Snapdragon lines across automotive, mobile, and wearables, including devices based on MD...

CVE-2018-11279

CVE-2018-11279 describes a buffer overflow caused by lack of input size checking in Qualcomm Snapdragon components for automotive, mobile, and wearables. Affected families include a long list of Qualcomm/SDM/SD variations (e.g., MDM9206, MDM9607, SD 210/212/205, SD 410/12, SD 625, SD 835, SD 845/...