9091 matches found
CVE-2017-18317
CVE-2017-18317 affects Qualcomm closed‑source components in Snapdragon Automotive and Snapdragon Mobile (MSM8996AU, SD 410/12, SD 820, SD 820A). The issue allows bypass of modem restrictions (sim lock/sim kill) by manipulating the system to issue a deactivation flow sequence. The available docume...
CVE-2018-5918
CVE-2018-5918 describes a possible buffer overflow in the DRM Trusted application on Qualcomm Snapdragon platforms (e.g., MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD family up to SDX24 and SXR1130, including SD410/12, SD425, SD430, SD450, SD615/16/SD415, SD625, SD650/52, SD800, SD810, SD82...
CVE-2018-5916
CVE-2018-5916 describes a buffer overread during PDP modify requests or network-initiated secondary PDP activation in Qualcomm Snapdragon components across Snapdragon Automotive, Mobile and Wear platforms. Affected Snapdragon families include MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640,...
CVE-2018-11921
The CVE-2018-11921 entry concerns a failure-condition handling defect that fails to return the correct error code. Affects Snapdragon family components across numerous SoCs (e.g., MDM9206, MDM9607, MDM9650, MSM8996AU, SD/SDX-series, SDA-series, SXR1130) and can cause unintended SUI behavior or di...
CVE-2018-11264
CVE-2018-11264 involves a buffer overflow in the Ontario fingerprinting code in Qualcomm Snapdragon platforms (Ontario fingerprint code) across multiple Snapdragon variants. The root cause is a lack of input validation for parameters entering TZ from HLOS, leading to a potential buffer overflow. ...
CVE-2018-5912
CVE-2018-5912 is a Critical, closed-source component buffer overflow in Video within Qualcomm Snapdragon firmware (MSM8996AU, etc.). Technical detail: input validation weakness in the Video path can lead to arbitrary code execution in a privileged context. Android May 2019 bulletin documents CVE-...
CVE-2018-11921
Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD...
CVE-2018-11996
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20,...
CVE-2018-5877
In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD...
CVE-2018-5870
CVE-2018-5870 concerns Snapdragon Mobile: an untrusted pointer dereference during loading of a service image affects select Qualcomm SoCs (SD835, SDA660, SDX24). The NVD entry lists a high base score (CVSSv3: 7.8, LOCAL attack, LOW privileges required, no user interaction) with impact on confiden...
CVE-2017-18315
CVE-2017-18315 describes a buffer over-read in an older ASN.1 parser in Qualcomm Snapdragon Mobile SD600. Affected component is the Snapdragon SD 600 platform; root cause is a vulnerability in the ASN.1 parsing code that can lead to a local vulnerability with complete impact on confidentiality, i...
CVE-2018-11994
SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, S...
CVE-2017-18316
Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660,...
CVE-2018-5916
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, ...
CVE-2018-11996
CVE-2018-11996 describes an out-of-bounds access in the Qualcomm device programmer when a malformed command is sent, affecting Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear platforms (versions including MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, ...
CVE-2017-18315
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600...
CVE-2017-18317
Restrictions related to the modem sim lock, sim kill can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A...
CVE-2018-5912
Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660...
CVE-2018-5918
Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD...