9949 matches found
CVE-2019-10489
CVE-2019-10489 involves a possible null-pointer dereference when parsing an AVI clip during copy in Qualcomm Snapdragon drivers across many Snapdragon products. Root cause: null pointer in parsing/copy path. Impact: high, with potential crash (availability) and no confidentiality/integrity impact...
CVE-2019-10492
CVE-2019-10492 describes a vulnerability in boot image verification where AVB verification can be bypassed for Qualcomm Snapdragon-based platforms (Snapdragon Auto, Mobile, Wearables) across multiple SoCs (MDM9607, MSM8909W, Qualcomm 215, SD series and SDM439). The issue is a local vulnerability ...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20149)
The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in Kernel in multiple Qualcomm products. The vulnerability originates from a networked system or product that does not properly validate input dat...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20151)
The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. An input validation error vulnerability exists in a number of Qualcomm products, which could be exploited by an attacker to cause, among other things, a buffer overflow or heap overflow...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20162)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20153)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. Multiple Qualcomm products are vulnerable to input validation errors, and no detailed vulnerability detail...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20159)
The Qualcomm MDM9607, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability originates from a network system or product that does not properly validate incoming...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20154)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20152)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. Multiple Qualcomm products are vulnerable to input validation errors, and no detailed vulnerability detail...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20155)
The Qualcomm MDM9640 and others are a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in Kernel in multiple Qualcomm products. The vulnerability originates from a networked system or product that does not properly validate input dat...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20160)
Qualcomm MDM9607 and others are products of Qualcomm Incorporated, U.S.A. The MDM9607 is a central processing unit CPU product.The Qualcomm MDM9206 is a central processing unit CPU product.The SDX20 is a modem. An input validation error vulnerability exists in multiple Qualcomm products. The...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20161)
Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability...
Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20150)
Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The Qualcomm MDM9150 is a central processing unit CPU product.The SDX20 is a modem.The Qualcomm MDM9150 is a central processing unit CPU product.The Qualcomm MDM9150 is a central...
Qualcomm WLAN Chip Remote Code Execution Vulnerability
The Qualcomm WLAN chip is a dedicated chip for processing WLAN/WIFI protocols on Qualcomm platforms and is part of the Qualcomm Baseband subsystem, which is used to increase the speed and performance of WLAN/WIFI processing and reduce energy consumption. A remote code execution vulnerability exis...
Bluetooth vulnerability can be exploited in Key Negotiation of Bluetooth (KNOB) attacks
Those who are familiar with Bluetooth BR/EDR technology aka Bluetooth Classic, from 1.0 to 5.1 can attest that it is not perfect. Like any other piece of hardware or software technology already on market, its usefulness comes with flaws. Early last week, academics at Singapore University of...
Google Android Qualcomm HLOS Component Elevation of Privilege Vulnerability
Android is an open source operating system based on Linux. A security vulnerability exists in the Android Qualcomm HLOS component, which can be exploited by an attacker to submit special requests that can elevate privileges...
CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!
TL;DR The TP-Link M7350 V3 is affected by a pre-authentication CVE-2019-12103, and a few post-authentication CVE-2019-12104 command injection vulnerabilities. These injections can be exploited remotely, if the attacker is on the same LAN or otherwise able to get access to the router web interface...
Millions of Android Smartphones Vulnerable to Trio of Qualcomm Bugs
UPDATE Security researchers from Tencent’s Blade Team are warning Android smartphone and tablet users of flaws in Qualcomm chipsets, called QualPwn. The bugs collectively allow hackers to compromise Android devices remotely simply by sending malicious packets over-the-air – no user interaction...
New Flaws in Qualcomm Chips Expose Millions of Android Devices to Hacking
A series of critical vulnerabilities have been discovered in Qualcomm chipsets that could allow hackers to compromise Android devices remotely just by sending malicious packets over-the-air with no user interaction. Discovered by security researchers from Tencent's Blade team, the vulnerabilities...
New Flaws in Qualcomm Chips Expose Millions of Android Devices to Hacking
A series of critical vulnerabilities have been discovered in Qualcomm chipsets that could allow hackers to compromise Android devices remotely just by sending malicious packets over-the-air with no user interaction. Discovered by security researchers from Tencent's Blade team, the vulnerabilities...