CVE-2018-11257

Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850...

CVE-2018-5878

While sending the response to a RILREQUESTGETSMSCADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5876

While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5875

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-11258

CVE-2018-11258 is a Use-After-Free vulnerability in the ADSP RPC component affecting Snapdragon devices (including Snapdragon Automotive, Mobile, and Wear platforms) with affected generations such as MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, and various SDx and SoCs (e.g., SD 210/212/205, 4...

CVE-2017-11088

CVE-2017-11088 is an SQL injection vulnerability described as a result of improper input validation in the Linux io-prefetch component on Qualcomm/Qualcomm-derived platforms. Public entries indicate affected Qualcomm/SoC families include MSM8909W, MSM8996AU and various Snapdragon SoCs (SD 210/212...

CVE-2018-5876

The CVE-2018-5876 issue affects Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. It stems from a buffer overflow while parsing MP4 files. The documented impact is high: CVSS v3 base score 8.8 (Network attack, no privileges required, user interaction required) with high confidentiali...

CVE-2018-5884

The CVE-2018-5884 entry concerns Snapdragon Multimedia on Qualcomm-based devices (Snapdragon Mobile and Snapdragon Wear). It describes an improper access-control vulnerability where non-standard applications, without permission, may acquire permission to Qualcomm-specific proprietary intents with...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

CVE-2018-5892

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5891

CVE-2018-5891 affects Snapdragon Mobile and Snapdragon Wear. After IMS is registered and IMS data daemon restarts, the ipc_dataHandle is not kept in sync with the freed dataDHandle, causing a Use-After-Free in the DPL thread and memory corruption risk. The description specifies local access (loca...

CVE-2018-5882

While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5874

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-11257

Summary: CVE-2018-11257 affects Snapdragon Mobile Trust Authority (TA) permissions, enabling RPMB erase on secure devices in SD 210/212/205 and SD 845/850. The root cause is a permissions/privileges/access control flaw in TA that could allow an attacker with local access to erase RPMB, enabling e...

CVE-2018-5885

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear...

CVE-2017-11088

Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845...

CVE-2018-5885

CVE-2018-5885 affects Snapdragon Mobile and Snapdragon Wear. The issue is a buffer overflow during dynamic font loading when the number of font segments is out of range in the font file, impacting the font loader component. The NVD metrics list a NETWORK, LOW-attack complexity, NONE authenticatio...

CVE-2018-11258

In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20...

CVE-2018-5892

CVE-2018-5892 concerns Touch Pal on Snapdragon Mobile and Snapdragon Wear where the app can collect user behavior data without user awareness. The NVD entry lists a NETWORK attack vector with low attack complexity and no user interaction required, and indicates partial confidentiality impact alon...

CVE-2018-5875

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...