PT-2018-17211

Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile affected versions not specified Snapdragon Mobile affected versions not specified Snapdragon Wear affected versions not specified Description: A buffer over-read issue can occur when parsing a Flac file with a corrupted...

PT-2018-17207

Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile affected versions not specified Snapdragon Mobile affected versions not specified Snapdragon Wear affected versions not specified Description: The issue arises when parsing an mp4 file, which can cause an integer overflo...

PT-2018-17208

Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile affected versions not specified Snapdragon Mobile affected versions not specified Snapdragon Wear affected versions not specified Description: A buffer overflow issue occurs while parsing an mp4 file. This issue affects...

PT-2018-17210

Name of the Vulnerable Software and Affected Versions: Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear affected versions not specified Description: A buffer overflow issue occurs when sending a response to a RIL REQUEST GET SMSC ADDRESS message. This issue affects Snapdragon...

PT-2018-17213

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile and Snapdragon Wear affected versions not specified Description: A buffer overflow issue may occur while loading dynamic fonts if the number of segments in the font file exceeds the expected range. Recommendations: At the...

PT-2018-17219

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile and Snapdragon Wear affected versions not specified Description: The issue occurs when the IMS data daemon is restarted after processing modem SSR, leading to a Use After Free condition. This happens because the DPL thread...

PT-2018-17220

Name of the Vulnerable Software and Affected Versions: Touch Pal affected versions not specified Description: The issue concerns the collection of user behavior data without the user's awareness in Snapdragon Mobile and Snapdragon Wear by the Touch Pal application. Recommendations: At the moment,...

PT-2018-17212

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile and Snapdragon Wear affected versions not specified Description: The issue is related to improper access control in the multimedia component of Qualcomm Snapdragon Mobile and Snapdragon Wear. Non-standard applicatio...

CVE-2018-5878: Improper Restriction of Operations within the Bounds of a Memory Buffer

While sending the response to a RILREQUESTGETSMSCADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5891: Use After Free

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in...

CVE-2018-5882: Out-of-bounds Read

While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5885: Improper Restriction of Operations within the Bounds of a Memory Buffer

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5894: Out-of-bounds Read

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur...

CVE-2018-5884: Improper Privilege Management

Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents...

CVE-2018-5876: Improper Restriction of Operations within the Bounds of a Memory Buffer

While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5875: Improper Restriction of Operations within the Bounds of a Memory Buffer

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5874: Out-of-bounds Write

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5892: Exposure of Sensitive Information to an Unauthorized Actor

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

CVE-2018-11259: Incorrect Permission Assignment for Critical Resource

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...