CVE-2016-5344

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to...

Qualcomm MSM8909W Path Traversal Vulnerability

The Qualcomm MSM8909W is a central processing unit CPU product from Qualcomm Incorporated USA. A path traversal vulnerability exists in DSP Services in the Qualcomm MSM8909W, which stems from a lack of checks on user data. An attacker could exploit the vulnerability to overwrite or read arbitrary...

Android Security Bulletin—August 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Out-of-bounds

Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice ...

CVE-2020-3699

CVE-2020-3699 affects Qualcomm/Snapdragon components (e.g., Snapdragon Auto, Compute, Electronics Connectivity, IOT, Wearables; various Qualcomm/QCS/SXR devices) with a root cause of an out-of-bounds access due to an improper length check when processing an assoc response. The vulnerability is de...

PT-2020-5848 · Qualcomm +1 · Qualcomm Snapdragon Wearables +8

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions prior to the fixed version Qualcomm Snapdragon Compute versions prior to the fixed version Qualcomm Snapdragon Connectivity versions prior to the fixed version Qualcomm Snapdragon Consumer IOT versions prior ...

USN-4414-1: Linux kernel vulnerabilities

It was discovered that the network block device nbd implementation in the Linux kernel did not properly check for error conditions in some situations. An attacker could possibly use this to cause a denial of service system crash. CVE-2019-16089 It was discovered that the btrfs file system...

Android Security Bulletin—July 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2020-3663

Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

Buffer overflow

Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

Information disclosure

System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607, Rennell, Saipan, SM8150, SM8250, SXR2130...

CVE-2020-3665

CVE-2020-3665 describes a buffer overflow that could occur when processing a command from firmware, caused by a group_id value obtained from the firmware being out of range. Affected products include Qualcomm Snapdragon Auto, Compute, Connectivity, and various Snapdragon families (APQ8009, APQ805...

Qualcomm SM8150 Resource Management Error Vulnerability

The Qualcomm SM8150 is a central processing unit CPU product from Qualcomm Incorporated USA. A resource management error vulnerability exists in the DSP server in the Qualcomm SM8150. A remote attacker could exploit this vulnerability to cause a denial of service with the help of specially crafte...

Security feature bypass

Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053,...

Input validation

Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the frame subtype in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

CVE-2020-3633

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2020-3615

CVE-2020-3615 affects Qualcomm WLAN on Snapdragon devices (e.g., Snapdragon Auto/Compute/Consumer Electronics/Soc families) where RMF-enabled environments drop valid deauth/disassoc frames due to improper enum values used to check frame subtype. This results in legitimate frames being discarded w...

USN-4363-1: Linux kernel vulnerabilities

It was discovered that the Serial CAN interface driver in the Linux kernel did not properly initialize data. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-11494 It was discovered that the linux kernel did not properly validate certain mount options to the...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-30221)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer overflow vulnerability exists in Data Network Stack & Connectivity in...

Qualcomm MSM8909W and QCS605 Resource Management Error Vulnerability

The Qualcomm QCS605 and Qualcomm MSM8909W are both central processing unit CPU products from Qualcomm Incorporated. A resource management error vulnerability exists in Display in the Qualcomm MSM8909W and QCS605. The vulnerability arises from improper management of system resources e.g., memory,...