Sd 652 Firmware (Qualcomm) - vulnerabilities (CVEs)

315 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-11-26. Vendor: Qualcomm.

CVEs of Sd 652 Firmware

• CVE-2018-5852 - CVSS 8.4 (high), 2024-11-26: An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat…
• CVE-2018-11952 - CVSS 8.4 (high), 2024-11-26: An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
• CVE-2017-9711 - CVSS 7.8 (high), 2024-11-22: Certain unprivileged processes are able to perform IOCTL calls.
• CVE-2019-2275 - CVSS 5.5 (medium), 2019-11-06: While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends…
• CVE-2019-2258 - CVSS 9.8 (critical), 2019-11-06: Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-10504 - CVSS 6.5 (medium), 2019-11-06: Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-10505 - CVSS 9.8 (critical), 2019-11-06: Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer…
• CVE-2019-2294 - CVSS 9.8 (critical), 2019-09-30: Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto,…
• CVE-2019-10508 - CVSS 7.8 (high), 2019-09-30: Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,…
• CVE-2019-2236 - CVSS 5.5 (medium), 2019-07-25: Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-2263 - CVSS 7.8 (high), 2019-07-25: Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
• CVE-2019-2290 - CVSS 7.8 (high), 2019-07-25: Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity,…
• CVE-2019-2254 - CVSS 9.8 (critical), 2019-07-25: Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-2273 - CVSS 7.5 (high), 2019-07-25: IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-2239 - CVSS 5.5 (medium), 2019-07-25: Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-2272 - CVSS 7.8 (high), 2019-07-25: Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT,…
• CVE-2018-13897 - CVSS 7.5 (high), 2019-07-25: Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity,…
• CVE-2019-2261 - CVSS 5.5 (medium), 2019-07-22: Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute,…
• CVE-2018-13924 - CVSS 9.8 (critical), 2019-07-22: Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2018-5913 - CVSS 7.8 (high), 2019-06-14: A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2018-5903 - CVSS 7.8 (high), 2019-06-14: Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer…
• CVE-2018-11955 - CVSS 9.8 (critical), 2019-06-14: Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in…
• CVE-2018-13906 - CVSS 9.1 (critical), 2019-06-14: The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon…
• CVE-2018-13910 - CVSS 7.8 (high), 2019-06-14: Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics…
• CVE-2018-11939 - CVSS 7.8 (high), 2019-06-14: Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2018-13902 - CVSS 7.5 (high), 2019-06-14: Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto,…
• CVE-2018-13908 - CVSS 7.8 (high), 2019-06-14: Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2017-8252 - CVSS 5.5 (medium), 2019-06-14: Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute,…
• CVE-2018-13901 - CVSS 5.5 (medium), 2019-06-14: Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon…
• CVE-2018-13907 - CVSS 5.3 (medium), 2019-06-14: While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in…
• CVE-2018-13911 - CVSS 9.8 (critical), 2019-06-14: Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-2248 - CVSS 7.8 (high), 2019-05-24: Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2247 - CVSS 7.8 (high), 2019-05-24: Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in…
• CVE-2019-2244 - CVSS 9.8 (critical), 2019-05-24: Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input…
• CVE-2018-13925 - CVSS 9.8 (critical), 2019-05-24: Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free…
• CVE-2018-11976 - CVSS 5.5 (medium), 2019-05-24: ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2018-13895 - CVSS 7.8 (high), 2019-05-24: Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in…
• CVE-2018-11967 - CVSS 7.8 (high), 2019-05-24: Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is…
• CVE-2018-13886 - CVSS 9.8 (critical), 2019-05-24: Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…
• CVE-2018-11953 - CVSS 9.8 (critical), 2019-05-24: While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer…
• CVE-2018-11271 - CVSS 9.8 (critical), 2019-05-24: Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2017-18274 - CVSS 7.8 (high), 2019-05-06: While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater…
• CVE-2017-18279 - CVSS 7.8 (high), 2019-05-06: Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055,…
• CVE-2017-18157 - CVSS 7.8 (high), 2019-05-06: A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W,…
• CVE-2017-18278 - CVSS 7.8 (high), 2019-05-06: An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the…
• CVE-2017-15841 - CVSS 5.5 (medium), 2019-05-06: When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, SD 430, SD…
• CVE-2017-18275 - CVSS 5.5 (medium), 2019-05-06: A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in…
• CVE-2018-11966 - CVSS 7.8 (high), 2019-04-04: Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
• CVE-2018-11958 - CVSS 5.5 (medium), 2019-04-04: Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2018-11820 - CVSS 5.5 (medium), 2019-02-25: Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute,…
• CVE-2018-11931 - CVSS 7.8 (high), 2019-02-25: Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
• CVE-2018-11289 - CVSS 7.8 (high), 2019-02-25: Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto,…
• CVE-2018-11864 - CVSS 5.5 (medium), 2019-02-25: Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2018-11845 - CVSS 5.5 (medium), 2019-02-25: Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute,…
• CVE-2018-13913 - CVSS 7.8 (high), 2019-02-25: Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial…
• CVE-2018-11888 - CVSS 7.8 (high), 2019-02-11: Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2018-11847 - CVSS 7.8 (high), 2019-02-11: Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and…
• CVE-2018-13888 - CVSS 7.8 (high), 2019-02-11: There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto,…
• CVE-2018-11899 - CVSS 7.8 (high), 2019-02-11: While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
• CVE-2017-18332 - CVSS 5.5 (medium), 2019-01-18: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
• CVE-2018-3595 - CVSS 5.5 (medium), 2019-01-18: Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile…
• CVE-2018-11279 - CVSS 8.8 (high), 2019-01-18: Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in…
• CVE-2017-8276 - CVSS 7.8 (high), 2019-01-18: Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU,…
• CVE-2018-5867 - CVSS 7.8 (high), 2019-01-18: Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
• CVE-2017-18330 - CVSS 7.8 (high), 2019-01-03: Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
• CVE-2017-18329 - CVSS 7.8 (high), 2019-01-03: Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640,…
• CVE-2017-18323 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607,…
• CVE-2017-18327 - CVSS 5.5 (medium), 2019-01-03: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
• CVE-2017-18141 - CVSS 7.8 (high), 2019-01-03: When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions…
• CVE-2017-18322 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
• CVE-2017-18326 - CVSS 5.5 (medium), 2019-01-03: Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640,…
• CVE-2017-11004 - CVSS 5.5 (medium), 2019-01-03: A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206,…
• CVE-2017-18320 - CVSS 7.8 (high), 2019-01-03: QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions…
• CVE-2017-18324 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
• CVE-2017-18319 - CVSS 5.5 (medium), 2019-01-03: Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645,…
• CVE-2017-18318 - CVSS 9.8 (critical), 2018-11-28: Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD…
• CVE-2018-5916 - CVSS 6.5 (medium), 2018-11-28: Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
• CVE-2018-11921 - CVSS 7.8 (high), 2018-11-28: Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display…
• CVE-2018-11264 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile,…
• CVE-2018-5918 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
• CVE-2018-11871 - CVSS 7.8 (high), 2018-10-29: Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon…
• CVE-2018-11870 - CVSS 7.8 (high), 2018-10-29: Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon…
• CVE-2018-5914 - CVSS 7.8 (high), 2018-10-26: Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile,…
• CVE-2018-11849 - CVSS 7.8 (high), 2018-10-26: Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile,…
• CVE-2018-11828 - CVSS 7.5 (high), 2018-10-26: When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC…
• CVE-2018-5866 - CVSS 7.8 (high), 2018-10-26: While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607,…
• CVE-2018-11853 - CVSS 7.8 (high), 2018-10-26: Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version…
• CVE-2017-18311 - CVSS 7.8 (high), 2018-10-26: XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in…
• CVE-2017-18310 - CVSS 7.8 (high), 2018-10-26: ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD…
• CVE-2018-11821 - CVSS 7.8 (high), 2018-10-26: Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD…
• CVE-2017-18124 - CVSS 7.8 (high), 2018-10-26: During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon…
• CVE-2018-11305 - CVSS 7.8 (high), 2018-10-26: When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in…
• CVE-2017-18299 - CVSS 5.5 (medium), 2018-10-23: Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in…
• CVE-2017-18312 - CVSS 7.8 (high), 2018-10-23: While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state…
• CVE-2017-18304 - CVSS 7.8 (high), 2018-10-23: Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile,…
• CVE-2017-18303 - CVSS 7.8 (high), 2018-10-23: While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon…
• CVE-2017-18293 - CVSS 7.8 (high), 2018-10-23: When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding…
• CVE-2017-18296 - CVSS 7.8 (high), 2018-10-23: Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile,…
• CVE-2017-18292 - CVSS 5.5 (medium), 2018-10-23: Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
• CVE-2017-18295 - CVSS 7.8 (high), 2018-10-23: Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version…