9148 matches found
Improper access control
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...
Buffer overflow
While sending the response to a RILREQUESTGETSMSCADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
Improper access control
Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents...
Race condition
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20...
Design/Logic Flaw
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
Stack overflow
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
Integer overflow
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...
Code injection
The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...
CVE-2018-11257
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850...
CVE-2018-5894
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur...
CVE-2018-5878
CVE-2018-5878 describes a buffer overflow during the handling of RIL_REQUEST_GET_SMSC_ADDRESS, affecting Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear. The issue is rooted in a memory management flaw in the response path, enabling potential overflow. Public metrics assign a base C...
CVE-2018-5838
CVE-2018-5838 concerns an “Improper Validation of Array Index” in the Adreno OpenGL driver affecting Snapdragon platforms (Automobile, Mobile, Wear). The issue can lead to an out-of-bounds access in SurfaceFlinger . According to the NVD entry, it has a CVSS v3.0 base score of 7.8 (High) , with LO...
CVE-2018-5891
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in...
CVE-2018-11259
This CVE (CVE-2018-11259) concerns Qualcomm Snapdragon devices (Automobile, Mobile, Wear) with NAND-based EFS storage. Root cause: improper access control allows fastboot access to erase the EFS partition, after which the apps processor has non-secure world read/write access to that partition unt...
CVE-2018-5894
CVE-2018-5894 describes an out-of-bounds access caused by improper validation of an array index when parsing an mp4 in Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. The vulnerability affects multimedia parsing code, with exploitation possible via a crafted file over a network; ho...
CVE-2018-5882
CVE-2018-5882 affects Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. The issue arises during parsing of a Flac file with a corrupted comment block, leading to a buffer over-read in the vulnerable Qualcomm-based platforms. The public descriptions explicitly name the affected product...
CVE-2018-5838
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger...
CVE-2018-5875
The CVE-2018-5875 entry relates to Snapdragon platforms (Automobile, Mobile, Wear). The root cause is an integer overflow during MP4 parsing that can lead to a buffer overflow in affected components. Documented impact indicates potential memory corruption with partial to high severity depending o...
CVE-2018-5874
The CVE-2018-5874 issue is a stack-based buffer overflow occurring in the MP4 parser of Qualcomm Snapdragon components: Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. The root cause is a parsing-time overflow in the MP4 handling, with the impact described as potential arbitrary cod...