Snapdragon Automobile (Qualcomm Inc.) - vulnerabilities (CVEs)

172 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2019-01-18. Vendor: Qualcomm Inc..

CVEs of Snapdragon Automobile

CVE-2018-11288 - CVSS 7.8 (high), 2019-01-18: Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon…
CVE-2018-5867 - CVSS 7.8 (high), 2019-01-18: Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
CVE-2017-18331 - CVSS 7.8 (high), 2019-01-18: Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650,…
CVE-2018-11279 - CVSS 8.8 (high), 2019-01-18: Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in…
CVE-2018-3595 - CVSS 5.5 (medium), 2019-01-18: Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile…
CVE-2018-5915 - CVSS 9.8 (critical), 2019-01-18: Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640,…
CVE-2017-8276 - CVSS 7.8 (high), 2019-01-18: Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU,…
CVE-2018-11999 - CVSS 5.5 (medium), 2019-01-18: Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
CVE-2018-5868 - CVSS 7.8 (high), 2019-01-18: Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD…
CVE-2017-18332 - CVSS 5.5 (medium), 2019-01-18: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
CVE-2017-18330 - CVSS 7.8 (high), 2019-01-03: Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
CVE-2017-11004 - CVSS 5.5 (medium), 2019-01-03: A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206,…
CVE-2017-18323 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607,…
CVE-2017-18320 - CVSS 7.8 (high), 2019-01-03: QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions…
CVE-2017-18141 - CVSS 7.8 (high), 2019-01-03: When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions…
CVE-2017-18327 - CVSS 5.5 (medium), 2019-01-03: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
CVE-2018-11996 - CVSS 7.8 (high), 2018-11-28: When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
CVE-2018-5916 - CVSS 6.5 (medium), 2018-11-28: Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
CVE-2017-18318 - CVSS 9.8 (critical), 2018-11-28: Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD…
CVE-2018-11994 - CVSS 7.8 (high), 2018-11-28: SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
CVE-2018-5912 - CVSS 7.8 (high), 2018-11-28: Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD…
CVE-2018-5918 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
CVE-2017-18317 - CVSS 7.8 (high), 2018-11-28: Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon…
CVE-2018-11921 - CVSS 7.8 (high), 2018-11-28: Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display…
CVE-2018-5877 - CVSS 7.8 (high), 2018-11-28: In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon…
CVE-2018-5917 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD…
CVE-2017-18316 - CVSS 7.8 (high), 2018-11-28: Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions…
CVE-2018-11264 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile,…
CVE-2018-11871 - CVSS 7.8 (high), 2018-10-29: Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon…
CVE-2018-11870 - CVSS 7.8 (high), 2018-10-29: Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon…
CVE-2018-11850 - CVSS 7.8 (high), 2018-10-26: Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile,…
CVE-2018-11849 - CVSS 7.8 (high), 2018-10-26: Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile,…
CVE-2018-3588 - CVSS 7.8 (high), 2018-10-26: There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon…
CVE-2017-18311 - CVSS 7.8 (high), 2018-10-26: XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in…
CVE-2017-18310 - CVSS 7.8 (high), 2018-10-26: ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD…
CVE-2017-18124 - CVSS 7.8 (high), 2018-10-26: During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon…
CVE-2018-11305 - CVSS 7.8 (high), 2018-10-26: When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in…
CVE-2017-18312 - CVSS 7.8 (high), 2018-10-23: While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state…
CVE-2017-18304 - CVSS 7.8 (high), 2018-10-23: Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile,…
CVE-2017-18303 - CVSS 7.8 (high), 2018-10-23: While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon…
CVE-2017-18299 - CVSS 5.5 (medium), 2018-10-23: Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in…
CVE-2017-18294 - CVSS 7.8 (high), 2018-10-23: While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC,…
CVE-2017-18298 - CVSS 7.8 (high), 2018-10-23: Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206,…
CVE-2017-18292 - CVSS 5.5 (medium), 2018-10-23: Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
CVE-2017-18296 - CVSS 7.8 (high), 2018-10-23: Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile,…
CVE-2017-18295 - CVSS 7.8 (high), 2018-10-23: Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version…
CVE-2017-18172 - CVSS 7.8 (high), 2018-10-23: In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in…
CVE-2017-18277 - CVSS 5.5 (medium), 2018-10-23: When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in…
CVE-2018-5871 - CVSS 6.5 (medium), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD…
CVE-2018-5837 - CVSS 7.5 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427,…
CVE-2018-11287 - CVSS 9.8 (critical), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD…
CVE-2018-11292 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD…
CVE-2018-11285 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD…
CVE-2018-11291 - CVSS 7.5 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU,…
CVE-2018-11277 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD…
CVE-2018-11290 - CVSS 7.5 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427,…
CVE-2017-18280 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD…
CVE-2018-11267 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425,…
CVE-2017-18314 - CVSS 9.8 (critical), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205,…
CVE-2017-18302 - CVSS 4.7 (medium), 2018-09-20: In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429,…
CVE-2018-11268 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205,…
CVE-2017-18155 - CVSS 7.8 (high), 2018-07-12: While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an…
CVE-2018-5894 - CVSS 6.5 (medium), 2018-07-06: Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds…
CVE-2018-5875 - CVSS 8.8 (high), 2018-07-06: While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5882 - CVSS 9.8 (critical), 2018-07-06: While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5874 - CVSS 8.8 (high), 2018-07-06: While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5878 - CVSS 9.8 (critical), 2018-07-06: While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
CVE-2018-5838 - CVSS 7.8 (high), 2018-07-06: Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can…
CVE-2018-5876 - CVSS 8.8 (high), 2018-07-06: While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-11259 - CVSS 7.7 (high), 2018-07-06: Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the…
CVE-2018-11258 - CVSS 7.8 (high), 2018-07-06: In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650,…
CVE-2016-10487 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607,…
CVE-2016-10486 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9645, SD 210/SD 212/SD 205,…
CVE-2016-10494 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607,…
CVE-2016-10484 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206,…
CVE-2016-10493 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607,…
CVE-2016-10467 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12,…
CVE-2016-10474 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206,…
CVE-2016-10462 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD…
CVE-2016-10471 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD…
CVE-2016-10452 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD…
CVE-2016-10469 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607,…
CVE-2016-10443 - CVSS 6.8 (medium), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607,…
CVE-2016-10446 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD…
CVE-2016-10433 - CVSS 8.1 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640,…
CVE-2016-10439 - CVSS 8.1 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD…
CVE-2016-10445 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD…
CVE-2016-10432 - CVSS 8.1 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD…
CVE-2016-10435 - CVSS 8.1 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625,…
CVE-2016-10444 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD…
CVE-2016-10434 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB…
CVE-2016-10417 - CVSS 8.1 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206,…
CVE-2016-10423 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD…
CVE-2016-10426 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD…
CVE-2016-10430 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD…
CVE-2016-10414 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
CVE-2016-10422 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
CVE-2016-10425 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD…
CVE-2016-10429 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
CVE-2016-10418 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD…