CVE-2017-18315

Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600...

CVE-2017-18315

CVE-2017-18315 describes a buffer over-read in an older ASN.1 parser in Qualcomm Snapdragon Mobile SD600. Affected component is the Snapdragon SD 600 platform; root cause is a vulnerability in the ASN.1 parsing code that can lead to a local vulnerability with complete impact on confidentiality, i...

CVE-2017-18318

Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A...

CVE-2018-5917

CVE-2018-5917 affects Qualcomm Snapdragon OEM crypto function in Snapdragon Automobile and Snapdragon Mobile across MSM8996AU, SD/SDX/ SDA variants (MSM8996AU, SD425, SD430, SD450, SD625, SD820/SD820A, SD835, SD845, SD850, SDA660, SDA845, SDX24, SXR1130). Root cause: improper input validation lea...

CVE-2018-5912

CVE-2018-5912 is a Critical, closed-source component buffer overflow in Video within Qualcomm Snapdragon firmware (MSM8996AU, etc.). Technical detail: input validation weakness in the Video path can lead to arbitrary code execution in a privileged context. Android May 2019 bulletin documents CVE-...

CVE-2017-18317

Restrictions related to the modem sim lock, sim kill can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU,SD 410/12,SD 820,SD 820A...

CVE-2018-11921

Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD...

CVE-2018-5877

In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD...

CVE-2017-18318

Technical details about CVE-2017-18318 are not publicly provided in the connected documents. The initial description notes a missing CRL issuer name validation in Qualcomm Snapdragon components. Monitor for official disclosures and patches from Qualcomm and Android security bulletins.

CVE-2017-18317

CVE-2017-18317 affects Qualcomm closed‑source components in Snapdragon Automotive and Snapdragon Mobile (MSM8996AU, SD 410/12, SD 820, SD 820A). The issue allows bypass of modem restrictions (sim lock/sim kill) by manipulating the system to issue a deactivation flow sequence. The available docume...

CVE-2018-5918

CVE-2018-5918 describes a possible buffer overflow in the DRM Trusted application on Qualcomm Snapdragon platforms (e.g., MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD family up to SDX24 and SXR1130, including SD410/12, SD425, SD430, SD450, SD615/16/SD415, SD625, SD650/52, SD800, SD810, SD82...

CVE-2018-5916

CVE-2018-5916 describes a buffer overread during PDP modify requests or network-initiated secondary PDP activation in Qualcomm Snapdragon components across Snapdragon Automotive, Mobile and Wear platforms. Affected Snapdragon families include MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640,...

CVE-2018-5912

Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660...

CVE-2018-5916

Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, ...

CVE-2018-5870

CVE-2018-5870 concerns Snapdragon Mobile: an untrusted pointer dereference during loading of a service image affects select Qualcomm SoCs (SD835, SDA660, SDX24). The NVD entry lists a high base score (CVSSv3: 7.8, LOCAL attack, LOW privileges required, no user interaction) with impact on confiden...

CVE-2018-11264

CVE-2018-11264 involves a buffer overflow in the Ontario fingerprinting code in Qualcomm Snapdragon platforms (Ontario fingerprint code) across multiple Snapdragon variants. The root cause is a lack of input validation for parameters entering TZ from HLOS, leading to a potential buffer overflow. ...

CVE-2018-5918

Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD...

Yi Home Camera Code Execution Vulnerability (CNVD-2018-22813)

Yi Home Camera is an IoT home camera sold worldwide. A code execution vulnerability exists in the firmware update function of the Yi Home Camera 27US 1.8.7.0D. An attacker can cause a CRC conflict by inserting an SD card and exploiting the vulnerability via a specially crafted 7-Zip file, which c...

Yi Home Camera Firmware Downgrade Vulnerability (CNVD-2018-22809)

Yi Home Camera is an IoT home camera sold worldwide. A firmware downgrade vulnerability exists in the firmware update feature of the Yi Home Camera 27US 1.8.7.0D. An attacker can cause a logic flaw by inserting an SD card and exploiting the vulnerability via a specially crafted file, from which a...

Yi Home Camera Code Execution Vulnerability (CNVD-2018-22808)

Yi Home Camera is an IoT home camera sold worldwide. A code execution vulnerability exists in the firmware update feature of the Yi Home Camera 27US 1.8.7.0D. An attacker can exploit the vulnerability by inserting an SD card and exploiting the vulnerability via a specially crafted file to cause a...