Mdm9207c Firmware (Qualcomm) - vulnerabilities (CVEs)

118 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-11-02. Vendor: Qualcomm.

CVEs of Mdm9207c Firmware

• CVE-2020-3703 - CVSS 9.8 (critical), 2020-11-02: u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE…
• CVE-2020-3696 - CVSS 7.8 (high), 2020-11-02: u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for…
• CVE-2020-3657 - CVSS 9.8 (critical), 2020-11-02: u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver…
• CVE-2020-3666 - CVSS 7.8 (high), 2020-09-08: u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2020-3624 - CVSS 7.8 (high), 2020-09-08: u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto,…
• CVE-2020-11118 - CVSS 7.5 (high), 2020-09-08: u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2020-11116 - CVSS 9.8 (critical), 2020-09-08: u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon…
• CVE-2020-11115 - CVSS 7.5 (high), 2020-09-08: u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon…
• CVE-2019-14074 - CVSS 7.8 (high), 2020-09-08: u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10527 - CVSS 7.8 (high), 2020-09-08: u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to…
• CVE-2020-3698 - CVSS 9.8 (critical), 2020-07-30: Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon…
• CVE-2020-3688 - CVSS 9.8 (critical), 2020-07-30: Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3699 - CVSS 9.8 (critical), 2020-07-30: Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon…
• CVE-2019-14093 - CVSS 7.8 (high), 2020-07-30: Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity,…
• CVE-2019-14037 - CVSS 7.8 (high), 2020-07-30: Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-14100 - CVSS 7.8 (high), 2020-07-30: Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-14099 - CVSS 7.8 (high), 2020-07-30: Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3658 - CVSS 9.1 (critical), 2020-06-22: Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3663 - CVSS 9.8 (critical), 2020-06-22: Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3661 - CVSS 9.8 (critical), 2020-06-22: Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in…
• CVE-2020-3660 - CVSS 9.8 (critical), 2020-06-22: Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3665 - CVSS 7.8 (high), 2020-06-22: A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon…
• CVE-2019-10626 - CVSS 5.5 (medium), 2020-06-22: Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdragon…
• CVE-2019-14092 - CVSS 5.5 (medium), 2020-06-22: System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206,…
• CVE-2019-14073 - CVSS 9.8 (critical), 2020-06-22: Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large…
• CVE-2020-3614 - CVSS 9.8 (critical), 2020-06-22: Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-14062 - CVSS 9.8 (critical), 2020-06-22: Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon…
• CVE-2019-14094 - CVSS 7.8 (high), 2020-06-22: Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon…
• CVE-2020-3641 - CVSS 9.8 (critical), 2020-06-02: Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3616 - CVSS 7.8 (high), 2020-06-02: Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3615 - CVSS 9.8 (critical), 2020-06-02: Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values…
• CVE-2020-3633 - CVSS 9.8 (critical), 2020-06-02: Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto,…
• CVE-2020-3630 - CVSS 7.8 (high), 2020-06-02: Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
• CVE-2019-14039 - CVSS 7.1 (high), 2020-06-02: Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-14038 - CVSS 7.1 (high), 2020-06-02: Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto,…
• CVE-2019-14053 - CVSS 7.1 (high), 2020-06-02: When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does…
• CVE-2019-14113 - CVSS 9.8 (critical), 2020-04-16: Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto,…
• CVE-2019-14135 - CVSS 7.8 (high), 2020-04-16: Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-14110 - CVSS 9.8 (critical), 2020-04-16: Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of…
• CVE-2019-14127 - CVSS 9.8 (critical), 2020-04-16: Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-14114 - CVSS 9.8 (critical), 2020-04-16: Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3651 - CVSS 7.5 (high), 2020-04-16: Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon…
• CVE-2019-14019 - CVSS 9.1 (critical), 2020-04-16: Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact…
• CVE-2019-14011 - CVSS 9.1 (critical), 2020-04-16: Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify…
• CVE-2019-14001 - CVSS 7.8 (high), 2020-04-16: Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
• CVE-2019-14070 - CVSS 7 (high), 2020-04-16: Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon…
• CVE-2019-10625 - CVSS 7.1 (high), 2020-04-16: Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-10622 - CVSS 9.1 (critical), 2020-04-16: Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto,…
• CVE-2019-10574 - CVSS 7.1 (high), 2020-04-16: Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
• CVE-2019-10483 - CVSS 5.5 (medium), 2020-04-16: Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10547 - CVSS 7.8 (high), 2020-04-16: When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-14098 - CVSS 9.8 (critical), 2020-03-05: Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-2311 - CVSS 9.8 (critical), 2020-03-05: Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2300 - CVSS 9.8 (critical), 2020-03-05: Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-14061 - CVSS 7.5 (high), 2020-03-05: Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-14032 - CVSS 7.8 (high), 2020-03-05: Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
• CVE-2019-14095 - CVSS 9.8 (critical), 2020-03-05: Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon…
• CVE-2019-14082 - CVSS 9.1 (critical), 2020-03-05: Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics…
• CVE-2019-14028 - CVSS 7.8 (high), 2020-03-05: Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-14026 - CVSS 7.8 (high), 2020-03-05: Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10603 - CVSS 7.8 (high), 2020-03-05: Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto,…
• CVE-2019-14031 - CVSS 9.8 (critical), 2020-03-05: Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-10591 - CVSS 7.5 (high), 2020-03-05: Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10526 - CVSS 9.8 (critical), 2020-03-05: Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-14057 - CVSS 9.1 (critical), 2020-02-07: Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-14088 - CVSS 7.8 (high), 2020-02-07: Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto,…
• CVE-2019-14060 - CVSS 7.8 (high), 2020-02-07: Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to lack of check of…
• CVE-2019-10567 - CVSS 7.8 (high), 2020-02-07: There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU…
• CVE-2019-14041 - CVSS 7.8 (high), 2020-02-07: During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical…
• CVE-2019-14040 - CVSS 7.8 (high), 2020-02-07: Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto,…
• CVE-2019-14055 - CVSS 7.8 (high), 2020-02-07: Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Snapdragon Auto,…
• CVE-2019-10590 - CVSS 9.8 (critical), 2020-02-07: Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-14049 - CVSS 7.8 (high), 2020-02-07: Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Auto,…
• CVE-2019-14013 - CVSS 9.8 (critical), 2020-01-21: While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon…
• CVE-2019-14003 - CVSS 7.5 (high), 2020-01-21: Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Auto, Snapdragon…
• CVE-2019-14006 - CVSS 9.8 (critical), 2020-01-21: Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-14017 - CVSS 9.8 (critical), 2020-01-21: Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-10611 - CVSS 9.8 (critical), 2020-01-21: Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-14005 - CVSS 9.8 (critical), 2020-01-21: Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-14016 - CVSS 9.8 (critical), 2020-01-21: Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
• CVE-2019-14004 - CVSS 9.8 (critical), 2020-01-21: Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
• CVE-2019-10558 - CVSS 7.8 (high), 2020-01-21: While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Auto,…
• CVE-2019-10581 - CVSS 9.8 (critical), 2020-01-21: NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon…
• CVE-2019-10532 - CVSS 9.8 (critical), 2020-01-21: Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity,…
• CVE-2019-10579 - CVSS 9.1 (critical), 2020-01-21: Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-10578 - CVSS 7.5 (high), 2020-01-21: Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-10602 - CVSS 7.8 (high), 2020-01-21: Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-10584 - CVSS 7.8 (high), 2019-12-18: Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
• CVE-2019-10607 - CVSS 7.8 (high), 2019-12-18: Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon…
• CVE-2019-10572 - CVSS 9.8 (critical), 2019-12-18: Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon…
• CVE-2019-10600 - CVSS 7.8 (high), 2019-12-18: Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in Snapdragon Auto,…
• CVE-2019-10557 - CVSS 9.8 (critical), 2019-12-18: Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2019-10595 - CVSS 7.8 (high), 2019-12-18: Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto,…
• CVE-2019-10614 - CVSS 9.8 (critical), 2019-12-18: Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in…
• CVE-2019-10544 - CVSS 7.8 (high), 2019-12-18: Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto, Snapdragon…
• CVE-2019-10513 - CVSS 5.5 (medium), 2019-12-18: Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10536 - CVSS 7.8 (high), 2019-12-18: Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in…
• CVE-2019-10480 - CVSS 7.8 (high), 2019-12-18: Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto, Snapdragon…
• CVE-2019-10518 - CVSS 7.8 (high), 2019-12-18: Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-10517 - CVSS 7.8 (high), 2019-12-18: Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…