CVE-2018-5885

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5882

While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5885

CVE-2018-5885 affects Snapdragon Mobile and Snapdragon Wear. The issue is a buffer overflow during dynamic font loading when the number of font segments is out of range in the font file, impacting the font loader component. The NVD metrics list a NETWORK, LOW-attack complexity, NONE authenticatio...

CVE-2018-5892

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5875

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5876

The CVE-2018-5876 issue affects Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. It stems from a buffer overflow while parsing MP4 files. The documented impact is high: CVSS v3 base score 8.8 (Network attack, no privileges required, user interaction required) with high confidentiali...

CVE-2018-5884

The CVE-2018-5884 entry concerns Snapdragon Multimedia on Qualcomm-based devices (Snapdragon Mobile and Snapdragon Wear). It describes an improper access-control vulnerability where non-standard applications, without permission, may acquire permission to Qualcomm-specific proprietary intents with...

CVE-2018-5838

CVE-2018-5838 concerns an “Improper Validation of Array Index” in the Adreno OpenGL driver affecting Snapdragon platforms (Automobile, Mobile, Wear). The issue can lead to an out-of-bounds access in SurfaceFlinger . According to the NVD entry, it has a CVSS v3.0 base score of 7.8 (High) , with LO...

CVE-2018-5891

CVE-2018-5891 affects Snapdragon Mobile and Snapdragon Wear. After IMS is registered and IMS data daemon restarts, the ipc_dataHandle is not kept in sync with the freed dataDHandle, causing a Use-After-Free in the DPL thread and memory corruption risk. The description specifies local access (loca...

CVE-2018-5884

Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents...

CVE-2018-5894

CVE-2018-5894 describes an out-of-bounds access caused by improper validation of an array index when parsing an mp4 in Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. The vulnerability affects multimedia parsing code, with exploitation possible via a crafted file over a network; ho...

CVE-2018-5875

The CVE-2018-5875 entry relates to Snapdragon platforms (Automobile, Mobile, Wear). The root cause is an integer overflow during MP4 parsing that can lead to a buffer overflow in affected components. Documented impact indicates potential memory corruption with partial to high severity depending o...

CVE-2018-5892

CVE-2018-5892 concerns Touch Pal on Snapdragon Mobile and Snapdragon Wear where the app can collect user behavior data without user awareness. The NVD entry lists a NETWORK attack vector with low attack complexity and no user interaction required, and indicates partial confidentiality impact alon...

CVE-2018-5882

CVE-2018-5882 affects Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. The issue arises during parsing of a Flac file with a corrupted comment block, leading to a buffer over-read in the vulnerable Qualcomm-based platforms. The public descriptions explicitly name the affected product...

CVE-2018-5891

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in...

CVE-2018-11257

Summary: CVE-2018-11257 affects Snapdragon Mobile Trust Authority (TA) permissions, enabling RPMB erase on secure devices in SD 210/212/205 and SD 845/850. The root cause is a permissions/privileges/access control flaw in TA that could allow an attacker with local access to erase RPMB, enabling e...

CVE-2018-5876

While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

CVE-2018-11257

Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850...

CVE-2018-11258

In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20...