Sd 855 Firmware (Qualcomm) - vulnerabilities (CVEs)

136 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-12-12. Vendor: Qualcomm.

CVEs of Sd 855 Firmware

• CVE-2019-10530 - CVSS 7.8 (high), 2019-12-12: Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial…
• CVE-2019-10520 - CVSS 5.5 (medium), 2019-12-12: An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory…
• CVE-2019-2249 - CVSS 9.8 (critical), 2019-11-06: Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2283 - CVSS 9.8 (critical), 2019-11-06: Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon…
• CVE-2019-2324 - CVSS 9.8 (critical), 2019-11-06: When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon…
• CVE-2019-2332 - CVSS 9.8 (critical), 2019-11-06: Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-2246 - CVSS 7.8 (high), 2019-11-06: Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon…
• CVE-2019-2275 - CVSS 5.5 (medium), 2019-11-06: While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends…
• CVE-2019-2323 - CVSS 9.8 (critical), 2019-11-06: Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2331 - CVSS 9.8 (critical), 2019-11-06: Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2258 - CVSS 9.8 (critical), 2019-11-06: Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2285 - CVSS 9.8 (critical), 2019-11-06: Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon…
• CVE-2019-2325 - CVSS 9.8 (critical), 2019-11-06: Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-10512 - CVSS 7.8 (high), 2019-11-06: Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
• CVE-2019-10524 - CVSS 7.8 (high), 2019-11-06: Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto,…
• CVE-2019-10533 - CVSS 9.8 (critical), 2019-11-06: Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10505 - CVSS 9.8 (critical), 2019-11-06: Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer…
• CVE-2019-10522 - CVSS 9.8 (critical), 2019-11-06: While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-10529 - CVSS 8.1 (high), 2019-11-06: Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto,…
• CVE-2019-10541 - CVSS 9.8 (critical), 2019-11-06: Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10515 - CVSS 5.5 (medium), 2019-11-06: DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer…
• CVE-2019-10528 - CVSS 9.8 (critical), 2019-11-06: Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon…
• CVE-2019-10534 - CVSS 9.8 (critical), 2019-11-06: Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10488 - CVSS 7.5 (high), 2019-11-06: Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-10496 - CVSS 7.8 (high), 2019-11-06: Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-10495 - CVSS 7.3 (high), 2019-11-06: Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
• CVE-2019-10491 - CVSS 7.8 (high), 2019-11-06: ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-10502 - CVSS 7.8 (high), 2019-11-06: Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-10539 - CVSS 9.8 (critical), 2019-09-30: Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-2284 - CVSS 7 (high), 2019-09-30: Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-2341 - CVSS 7.8 (high), 2019-09-30: Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2252 - CVSS 9.8 (critical), 2019-09-30: Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon…
• CVE-2019-2333 - CVSS 7.8 (high), 2019-09-30: Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-10540 - CVSS 9.8 (critical), 2019-09-30: Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2294 - CVSS 9.8 (critical), 2019-09-30: Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto,…
• CVE-2019-10497 - CVSS 7.8 (high), 2019-09-30: Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon…
• CVE-2019-10501 - CVSS 7.8 (high), 2019-09-30: Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-10509 - CVSS 9.8 (critical), 2019-09-30: Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-10489 - CVSS 7.5 (high), 2019-09-30: Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-10499 - CVSS 7.8 (high), 2019-09-30: Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile,…
• CVE-2019-10507 - CVSS 7.8 (high), 2019-09-30: Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2019-10538 - CVSS 9.8 (critical), 2019-09-30: Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in…
• CVE-2019-10498 - CVSS 7.8 (high), 2019-09-30: Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-10506 - CVSS 7.8 (high), 2019-09-30: While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space which could be…
• CVE-2019-10510 - CVSS 8.2 (high), 2019-09-30: BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon…
• CVE-2019-2334 - CVSS 7.5 (high), 2019-07-25: Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2019-2346 - CVSS 7.8 (high), 2019-07-25: Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon…
• CVE-2019-2343 - CVSS 5.5 (medium), 2019-07-25: Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver in…
• CVE-2019-2305 - CVSS 9.8 (critical), 2019-07-25: Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2019-2308 - CVSS 7.8 (high), 2019-07-25: User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in…
• CVE-2019-2316 - CVSS 8.8 (high), 2019-07-25: When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice &…
• CVE-2019-2327 - CVSS 9.8 (critical), 2019-07-25: Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-2301 - CVSS 7.8 (high), 2019-07-25: Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-2307 - CVSS 9.8 (critical), 2019-07-25: Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon…
• CVE-2019-2314 - CVSS 7 (high), 2019-07-25: Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2326 - CVSS 7.8 (high), 2019-07-25: Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdragon…
• CVE-2019-2330 - CVSS 5.5 (medium), 2019-07-25: improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2299 - CVSS 7.8 (high), 2019-07-25: An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2019-2306 - CVSS 7.8 (high), 2019-07-25: Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
• CVE-2019-2312 - CVSS 7.8 (high), 2019-07-25: When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto,…
• CVE-2019-2322 - CVSS 9.8 (critical), 2019-07-25: Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-2328 - CVSS 7.8 (high), 2019-07-25: Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2298 - CVSS 7.8 (high), 2019-07-25: Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2241 - CVSS 5.5 (medium), 2019-07-25: While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to unintended SUI…
• CVE-2019-2273 - CVSS 7.5 (high), 2019-07-25: IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2019-2293 - CVSS 7.8 (high), 2019-07-25: Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2019-2240 - CVSS 5.5 (medium), 2019-07-25: While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto,…
• CVE-2019-2254 - CVSS 9.8 (critical), 2019-07-25: Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
• CVE-2019-2281 - CVSS 7.8 (high), 2019-07-25: An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon…
• CVE-2019-2253 - CVSS 9.8 (critical), 2019-07-25: Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT,…
• CVE-2019-2276 - CVSS 9.8 (critical), 2019-07-25: Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon…
• CVE-2018-13897 - CVSS 7.5 (high), 2019-07-25: Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity,…
• CVE-2019-2292 - CVSS 7.8 (high), 2019-07-22: Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT,…
• CVE-2019-2287 - CVSS 9.8 (critical), 2019-07-22: Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2279 - CVSS 9.8 (critical), 2019-07-22: Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
• CVE-2019-2277 - CVSS 7.8 (high), 2019-07-22: Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2018-13896 - CVSS 7.8 (high), 2019-07-22: XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage.. in…
• CVE-2019-2243 - CVSS 5.5 (medium), 2019-07-22: Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdragon Auto, Snapdragon…
• CVE-2019-2269 - CVSS 9.8 (critical), 2019-07-22: Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Auto, Snapdragon…
• CVE-2018-13927 - CVSS 7.8 (high), 2019-07-22: Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon Auto,…
• CVE-2019-2261 - CVSS 5.5 (medium), 2019-07-22: Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute,…
• CVE-2018-13924 - CVSS 9.8 (critical), 2019-07-22: Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2260 - CVSS 7 (high), 2019-07-22: A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2019-2256 - CVSS 9.8 (critical), 2019-06-14: An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2255 - CVSS 9.8 (critical), 2019-06-14: An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute,…
• CVE-2019-2259 - CVSS 9.8 (critical), 2019-06-14: Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-2257 - CVSS 7.8 (high), 2019-06-14: Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
• CVE-2018-3583 - CVSS 7.8 (high), 2019-06-14: A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…
• CVE-2018-5911 - CVSS 7.8 (high), 2019-06-14: Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2018-13919 - CVSS 7.8 (high), 2019-06-14: Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto,…
• CVE-2018-5903 - CVSS 7.8 (high), 2019-06-14: Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer…
• CVE-2018-5883 - CVSS 7.8 (high), 2019-06-14: Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial…
• CVE-2018-5913 - CVSS 7.8 (high), 2019-06-14: A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2018-11819 - CVSS 7.8 (high), 2019-06-14: Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2018-11942 - CVSS 5.5 (medium), 2019-06-14: Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in…
• CVE-2018-13898 - CVSS 9.8 (critical), 2019-06-14: Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,…
• CVE-2018-13906 - CVSS 9.1 (critical), 2019-06-14: The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon…
• CVE-2017-8252 - CVSS 5.5 (medium), 2019-06-14: Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute,…
• CVE-2018-11934 - CVSS 7.8 (high), 2019-06-14: Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2018-11955 - CVSS 9.8 (critical), 2019-06-14: Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in…