CVE-2019-14127

Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064,...

CVE-2019-14131

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

CVE-2019-14105

CVE-2019-14105 affects Qualcomm Snapdragon components (e.g., Snapdragon Industrial IOT, SDA845/SDM845/SM8150) where the kernel read a CSL-reserved field as uint16 instead of uint32, causing memory overflow. Exploitation is described as local (LAS) with low complexity in the NVD entry; no explicit...

CVE-2019-14104

Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, SC8180X, SDX55, SM8150...

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

CVE-2019-14104

CVE-2019-14104 describes a slab-out-of-bounds access caused by a missing null check before dereferencing the context pointer in Snapdragon Compute/IoT/Mobile components (APQ8053, SC8180X, SDX55, SM8150). Affected products include Snapdragon Compute, Snapdragon Consumer IoT, and Snapdragon Mobile ...

CVE-2019-14075

Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan,...

CVE-2019-14033

Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096,...

CVE-2019-14020

CVE-2019-14020 describes “Multiple Read overflows” caused by improper length checks when decoding several Qualcomm/Snapdragon protocol messages (dedicated_eps_bearer_req, act_def_context_req, cs_serv_notification, emm_info, guti_realloc_cmd) affecting a wide range of Snapdragon-based devices (Aut...

CVE-2019-14012

Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905,...

CVE-2019-14009

Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2019-14011

Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify context reject in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

CVE-2019-14009

CVE-2019-14009 corresponds to an out-of-bounds memory access in the TZ command handler on Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, IOT, Mobile, etc.) caused by improper input validation of the response length from user space. Affected components include Snapdragon devices acros...

CVE-2019-10623

Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in...

CVE-2019-10621

CVE-2019-10621 affects Qualcomm Snapdragon components (multiple mobile, auto, IoT variants) where a use-after-free can occur when MAP and UNMAP calls run concurrently; a data structure used by MAP may be freed by UNMAP. This is a local, high-severity issue with potential for partial confidentiali...

CVE-2019-10610

Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2019-10589

CVE-2019-10589 concerns Qualcomm’s closed‑source components and affects multiple Snapdragon SKUs (Auto, Compute, Connectivity, IoT, Mobile, etc.). The issue is a lack of length checking of a GP command response buffer, which can cause a buffer overflow during response handling in affected Snapdra...

CVE-2019-10589

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2019-10547

When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...