Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from a lack of validation of pointer parameters passed to the Trustzone BSP, resulting in memory corruption. The following products...

Qualcomm Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Bluetooth support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm WLAN Firmware that originates from an out-of-bounds read if the EAPOL key length is less than expected when processing NAN shared key descriptor attributes. The...

Qualcomm Video Buffer Error Vulnerability

Qualcomm Video is a Qualcomm Incorporated USA video component used in Qualcomm products. A buffer error vulnerability exists in Qualcomm Video, which stems from a failure to check the length of data received from a user, and could result in a heap overflow when parsing NAL headers. The following...

Qualcomm Automotive Telematics Security Breach

Qualcomm Automotive Telematics is a support firmware for automotive telematics from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Automotive Telematics where a newly created buffer is read again from mmc without validation. mdm9630, mdm9640, mdm9650, mdm9655, msm8909w,...

Qualcomm Qualcomm Dsp Service Resource Management Error Vulnerability

Qualcomm Dsp Service is a digital signal processor from Qualcomm Incorporated that meets the needs of mobile platforms for multimedia and modem functionality, deep embedded processing. pm3003a, pm4125, pm439, pm456, pm6125, pm6150, pm6150a, pm6150l, pm6250, pm6350, pm640a, pm640l, pm640p, pm660,...

Qualcomm Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Bluetooth support firmware from Qualcomm, Inc. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which results in a buffer over-read due to a failure to check the length of incoming messages. The following products and versions are affected: AQT1000, AR803...

Qualcomm Qualcomm Graphics Resource Management Error Vulnerability

Qualcomm Graphics is a graphics support firmware for use on processors from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Graphics, which arises from attachments that are not properly cleaned. pm3003a, pm4125, pm439, pm456, pm6125, pm6150, pm6150a, pm6150l, pm6250, pm6350...

Qualcomm Graphics Input Validation Error Vulnerability

Qualcomm Graphics is a graphics support firmware for use on processors from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Graphics, which arises from memory corruption due to incorrect check return errors. The following products and versions are affected:...

Qualcomm Qualcomm Core Security Vulnerability

Qualcomm Core is a core support firmware used on processors from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Core Services, which arises from improper release of uninitialized memory. The following products and versions are affected: APQ8017, APQ8053, AQT1000, MSM8917,...

Qualcomm Qualcomm Core Input Validation Error Vulnerability

Qualcomm Core is a core support firmware used on processors from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Core that stems from a dci client registration failure that does not mitigate a resource leak during dci client registration due to reference counting...

Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from an information disclosure issue caused by not validating pointer parameters passed to the TZ BSP. The following products and...

Qualcomm WIN TZ FW Security Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. A security vulnerability exists in Qualcomm WIN TZ FW, which arises from an image address being dereferenced prior to validation of its scope, and affects the following products and versions: AR7420, AR9580,...

Qualcomm Wlan Hal Input Validation Error Vulnerability

Qualcomm Wlan Hal is a Bluetooth support firmware from Qualcomm Incorporated. APQ8096AU, AQT1000, AR7420, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4019, IPQ4028, IPQ4029. ipq5010, ipq5018, ipq6000, ipq6005, ipq6010, ipq6018, ipq6028, ipq8064,...

Android Security Bulletin—January 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2021-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2020-35553

An issue was discovered on Samsung mobile devices with Q10.0 and R11.0 Qualcomm SM8250 chipsets software. They allows attackers to cause a denial of service unlock failure by triggering a power-shortage incident that causes a false-positive attack detection. The Samsung ID is SVE-2020-19678...

CVE-2020-35552

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

Design/Logic Flaw

An issue was discovered in the GPS daemon on Samsung mobile devices with O8.x, P9.0, and Q10.0 non-Qualcomm chipsets software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 December 2020...

Code injection

An issue was discovered on Samsung mobile devices with Q10.0 and R11.0 Qualcomm SM8250 chipsets software. They allows attackers to cause a denial of service unlock failure by triggering a power-shortage incident that causes a false-positive attack detection. The Samsung ID is SVE-2020-19678...

CVE-2020-35553

CVE-2020-35553 affects Samsung mobile devices running Android Q (10.0) and R (11.0) on Qualcomm SM8250 chipsets. The issue allows a denial of service (unlock failure) by triggering a power-shortage incident that leads to a false-positive attack detection. No concrete exploit details, affected sof...

Qualcomm SM8250 Security Vulnerability

The Qualcomm SM8250 is a central processing unit CPU product from Qualcomm Incorporated USA. A security vulnerability exists in Samsung mobile devices with Q10.0 and R11.0 Qualcomm SM8250 chipsets software that could allow an attacker to trigger a power shortage event leading to the detection of ...