Google Fixes Critical Android RCE Flaw

Google kicked off its first Android Security Bulletin of 2020 patching a critical flaw in its Android operating system, which if exploited could allow a remote attacker to execute code. Compared to last year’s monthly tally, the number of CVEs patched this month were relatively few. The...

Qualcomm Closed Source Components Multiple Security Vulnerabilities

Description Qualcomm Closed-Source Components are prone to the following security vulnerabilities: 1. Multiple buffer-overflow vulnerabilities 2. Multiple security vulnerabilities 3. Multiple integer-overflow vulnerabilities 4. An unauthorized-access vulnerability 5. An heap-based buffer...

Android Security Bulletin—January 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03571)

Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The MDM9650 is a central processing unit CPU product.The SDX24 is a modem.The MDM9650 is a central processing unit CPU product.The MDM9650 is a central processing unit CPU...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03572)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer overflow vulnerability exists in the Kernel in multiple Qualcomm products...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-03578)

The Qualcomm MSM8996AU, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in WLAN Host in multiple Qualcomm products, which can be exploited by an attacker to gain out-of-scope access while processing firmware event...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2020-03573)

The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. A resource management error vulnerability exists in WLAN Host in multiple Qualcomm products. No detailed vulnerability details are available at this time...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03577)

Qualcomm MDM9607 and others are products of Qualcomm Incorporated, U.S.A. The MDM9607 is a central processing unit CPU product.The MSM8996AU is a central processing unit CPU product.The QCA6574AU is a central processing unit CPU product. A buffer overflow vulnerability exists in WLAN Host in...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03580)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A buffer overflow vulnerability exists in the Multi-mode Call processor in multiple...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-03576)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. An input validation error vulnerability exists in WLAN in multiple Qualcomm product...

Multiple Qualcomm Products Input Validation Error Vulnerability

The Qualcomm QCA6574AU, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in WLAN Host in multiple Qualcomm products, which can be exploited by an attacker to cause an integer overflow...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03575)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.SDX20 is a modem.WLAN is one of the wireless LAN components. A buffer overflow vulnerability exists in WLAN in multiple Qualcomm...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-03579)

The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. A buffer overflow vulnerability exists in WLAN Host in multiple Qualcomm products, which arises when a network system or product performs an operation in memory without properly validating data...

CVE-2019-10601

Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure a...

CVE-2019-10513

Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

CVE-2018-11980

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wmaprocessbip, buffer overflow will happen in both cdsismmievalid and qdfnbuftrimtail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

Code injection

Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Input validation

Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

CVE-2019-2304

CVE-2019-2304 describes an integer overflow that can lead to a buffer overflow due to insufficient validation of firmware event arguments. Affects Snapdragon platforms (e.g., IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM9xxx, SDM/B series) across multiple product families (Auto, Electronics Connectivit...

CVE-2019-10607

CVE-2019-10607 describes an out-of-bounds memcpy issue in Qualcomm Snapdragon firmware/stack affecting numerous Snapdragon SoCs (APQ/SDX/SM8140 family and related). The root cause is providing an embedded NULL character with a string length greater than the actual string length, leading to out-of...