CVE-2018-13887

Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215,...

CVE-2018-11271

Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607,...

CVE-2018-11976

ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

Google Patches Critical Bluetooth RCE Bug

Eleven critical Android bugs were patched as part of Google’s March Security Update. Three of them were tied to Android’s media framework and core system, while the others were related to faulty Qualcomm chip components. Out of those critical bugs, Google patched three critical remote...

Access Control Error Vulnerability in Multiple Qualcomm Products

The Qualcomm MDM9607, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An Access Control Error vulnerability exists in Content Protection in multiple Qualcomm products. An attacker could exploit the vulnerability to gain access to sensitive key area input data...

Information Disclosure Vulnerability in Multiple Qualcomm Products (CNVD-2019-08980)

The Qualcomm MDM9607, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An information disclosure vulnerability exists in TrustZone in multiple Qualcomm products. An attacker could exploit this vulnerability to disclose information...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2019-06481)

The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. A buffer overflow vulnerability exists in the PMIC Modules of several Qualcomm products, which can be exploited by an attacker to execute code or cause a denial of service, due to the length of the...

Buffer Overflow Vulnerability in Multiple Qualcomm Products

The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. A buffer overflow vulnerability exists in multiple Qualcomm products, which arises from a program's failure to validate input of data from user space and can be exploited by an attacker to execute...

Unauthorized Access Vulnerability in Multiple Qualcomm Products

Qualcomm MDM9206 and others are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The SDX24 is a modem.The SD 425 is a central processing unit CPU product. An unauthorized access vulnerability exists in Display in multiple Qualcomm products, which stem...

CVE-2018-13914

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD...

Google Patches Critical .PNG Image Bug

Google has patched a critical vulnerability in its current and legacy versions of its Android operating system, which allow an attacker to send a specially crafted Portable Network Graphics .PNG image file to a targeted device and execute arbitrary code. In its February Android Security Bulletin,...

Qualcomm MDM9206 and MDM9607 Product Buffer Overflow Vulnerability

The Qualcomm MDM9206 and MDM9607 are both central processing unit CPU products from Qualcomm Incorporated USA. A buffer overflow vulnerability exists in the Qualcomm MDM9206 and MDM9607 products, which arises from a program performing an incorrect check when accessing the local memory stack and c...

Multiple Qualcomm Product Input Validation Vulnerabilities (CNVD-2019-01714)

Qualcomm IPQ8074 and others are central processing unit CPU products from Qualcomm Incorporated for various platforms.Content Protection is one of the content protection components. An input validation vulnerability in Content Protection in multiple Qualcomm products can be exploited by a remote...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4315)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4315 advisory. - pinctrl: amd: Use devmpinctrlregister for pinctrl registration Laxman Dewangan Orabug: 27539246 CVE-2017-18174 - mlock: fix mlock count can not...

CVE-2017-18320

QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 ...

The vulnerability of the Qualcomm 1x Android operating system component, which allows a hacker to cause memory corruption.

The vulnerability of the Qualcomm 1x Android operating system component is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause memory corruption...

The vulnerability of the Qualcomm Widevine component of the Android operating system allows a hacker to trigger a memory buffer overflow.

The vulnerability of the Qualcomm Widevine component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a buffer overflow in memory...

The vulnerability of the Qualcomm Modem IP Stack component in the Android operating system allows a hacker to induce a service failure.

The vulnerability of the Qualcomm Modem IP Stack component in the Android operating system is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Qualcomm Widevine component of the Android operating system allows a hacker to trigger a memory buffer overflow.

The vulnerability of the Qualcomm Widevine component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a buffer overflow in memory...

The vulnerability of the Qualcomm TrustZone component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the Qualcomm TrustZone component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...