CVE-2018-5867

Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625...

CVE-2017-8276

Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD...

CVE-2017-8276

CVE-2017-8276 describes improper authorization involving a fuse in TrustZone affecting Qualcomm Snapdragon automotive, mobile, and wear platforms. Documented affected families include MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439/SD 429, SD 4...

CVE-2017-18332

CVE-2017-18332 describes a vulnerability where security keys are logged during WCDMA call configuration on Qualcomm Snapdragon automotive/mobile/wear platforms (MDM9607/MDM9635M/MDM9640/MDM9645/MDM9650/MDM9655, MSM8909W/MSM8996AU, SDx family, etc.). Connected records list affected Qualcomm compon...

CVE-2017-18331

CVE-2017-18331 affects Qualcomm Snapdragon devices with affected secure display buffers (mobile, automobile, wearables) and is due to an improper access control in the buffer handling. Affected products/SoCs include versions of MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/212/205, SD 820, SD 820A...

CVE-2018-11288

Possible undefined behavior due to lack of size check in function for parameter segmentidx can lead to a read outside of the intended region in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, ...

CVE-2018-11998

CVE-2018-11998 affects Qualcomm Snapdragon mobile and Snapdragon Wear devices (including MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016). The vulnerability arises during processing of a packet decode request...

CVE-2018-11998

While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, SnapdragonHighMed2016...

CVE-2018-11999

Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660,...

CVE-2018-11284

CVE-2018-11284 describes a vulnerability where spoofed SMS can trigger a flood of registration updates to the server on devices using Qualcomm Snapdragon mobile and Snapdragon Wear platforms (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20). The underlying...

CVE-2018-11288

CVE-2018-11288 describes a potential undefined behavior caused by a missing size check in a function parameter segment_idx, which can lead to a read outside the intended region. Affected products are Qualcomm Snapdragon lines across automotive, mobile, and wearables, including devices based on MD...

CVE-2018-11284

Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20...

CVE-2017-18160

CVE-2017-18160 affects Qualcomm Snapdragon GNSS AGPS due to hardcoded cyphersuites that require manual updates for each device/version (MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835/845/850). The described impact is AGPS session failure in the GNSS module. Connected sources provide this d...

CVE-2018-5881

Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660...

CVE-2018-5881

CVE-2018-5881 is a buffer-length validation flaw in the LwM2M device management protocol that can lead to a buffer overflow on Snapdragon platforms. Affected are Snapdragon Mobile and Wear devices across MDM9206, MDM9607, and SD variants: SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SD...

CVE-2018-5880

Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660...

CVE-2018-5869

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810...

CVE-2018-5869

CVE-2018-5869 concerns improper input validation in the QTEE keymaster app, leading to invalid memory access on Qualcomm Snapdragon mobile/wear platforms. Affected are devices using several Snapdragon families (e.g., MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 410/12, SD 615/16/SD 415, SD 800,...

CVE-2018-5868

CVE-2018-5868 affects WideVine in Qualcomm Snapdragon Automotive and Snapdragon Mobile devices (e.g., MSM8996AU, SD 425/430/450/625/712/710/670/820/820A/835/845/850, SDA660, SDX24, SXR1130). Root cause: lack of input size checking leading to a buffer overflow. Impact: local code execution with hi...

CVE-2018-3595

Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 7...