Snapdragon Wear (Qualcomm Inc.) - vulnerabilities (CVEs)

274 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2019-01-18. Vendor: Qualcomm Inc..

CVEs of Snapdragon Wear

• CVE-2018-3595 - CVSS 5.5 (medium), 2019-01-18: Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile…
• CVE-2018-5880 - CVSS 7.8 (high), 2019-01-18: Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions…
• CVE-2017-18160 - CVSS 9.8 (critical), 2019-01-18: AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions…
• CVE-2017-8276 - CVSS 7.8 (high), 2019-01-18: Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU,…
• CVE-2018-11288 - CVSS 7.8 (high), 2019-01-18: Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon…
• CVE-2018-11999 - CVSS 5.5 (medium), 2019-01-18: Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
• CVE-2018-5879 - CVSS 8.8 (high), 2019-01-18: Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD…
• CVE-2018-5915 - CVSS 9.8 (critical), 2019-01-18: Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640,…
• CVE-2017-18332 - CVSS 5.5 (medium), 2019-01-18: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
• CVE-2018-11284 - CVSS 9.3 (critical), 2019-01-18: Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in…
• CVE-2018-11998 - CVSS 7.5 (high), 2019-01-18: While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in…
• CVE-2018-5867 - CVSS 7.8 (high), 2019-01-18: Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
• CVE-2018-5881 - CVSS 8.8 (high), 2019-01-18: Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in…
• CVE-2017-18331 - CVSS 7.8 (high), 2019-01-18: Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650,…
• CVE-2018-11279 - CVSS 8.8 (high), 2019-01-18: Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in…
• CVE-2018-11993 - CVSS 8.8 (high), 2019-01-18: Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607
• CVE-2017-18328 - CVSS 7.8 (high), 2019-01-03: Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650,…
• CVE-2017-18330 - CVSS 7.8 (high), 2019-01-03: Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
• CVE-2017-18329 - CVSS 7.8 (high), 2019-01-03: Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640,…
• CVE-2017-18324 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
• CVE-2017-18141 - CVSS 7.8 (high), 2019-01-03: When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions…
• CVE-2017-18323 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607,…
• CVE-2017-18327 - CVSS 5.5 (medium), 2019-01-03: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions…
• CVE-2017-11004 - CVSS 5.5 (medium), 2019-01-03: A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206,…
• CVE-2017-18322 - CVSS 5.5 (medium), 2019-01-03: Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
• CVE-2017-18326 - CVSS 5.5 (medium), 2019-01-03: Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640,…
• CVE-2017-18319 - CVSS 5.5 (medium), 2019-01-03: Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645,…
• CVE-2016-10502 - CVSS 9.8 (critical), 2018-12-10: While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon…
• CVE-2018-11264 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile,…
• CVE-2018-11996 - CVSS 7.8 (high), 2018-11-28: When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
• CVE-2018-5918 - CVSS 7.8 (high), 2018-11-28: Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
• CVE-2017-18316 - CVSS 7.8 (high), 2018-11-28: Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions…
• CVE-2018-11994 - CVSS 7.8 (high), 2018-11-28: SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
• CVE-2018-5916 - CVSS 6.5 (medium), 2018-11-28: Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
• CVE-2018-11921 - CVSS 7.8 (high), 2018-11-28: Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display…
• CVE-2018-5877 - CVSS 7.8 (high), 2018-11-28: In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon…
• CVE-2018-11870 - CVSS 7.8 (high), 2018-10-29: Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon…
• CVE-2018-11871 - CVSS 7.8 (high), 2018-10-29: Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon…
• CVE-2018-11866 - CVSS 7.8 (high), 2018-10-29: Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon…
• CVE-2018-11865 - CVSS 7.8 (high), 2018-10-29: Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in…
• CVE-2018-5914 - CVSS 7.8 (high), 2018-10-26: Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile,…
• CVE-2018-11850 - CVSS 7.8 (high), 2018-10-26: Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile,…
• CVE-2018-5866 - CVSS 7.8 (high), 2018-10-26: While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607,…
• CVE-2018-11849 - CVSS 7.8 (high), 2018-10-26: Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile,…
• CVE-2018-3588 - CVSS 7.8 (high), 2018-10-26: There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon…
• CVE-2018-11824 - CVSS 7.8 (high), 2018-10-26: A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD…
• CVE-2018-11853 - CVSS 7.8 (high), 2018-10-26: Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version…
• CVE-2017-18310 - CVSS 7.8 (high), 2018-10-26: ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD…
• CVE-2018-11821 - CVSS 7.8 (high), 2018-10-26: Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD…
• CVE-2017-18308 - CVSS 7.8 (high), 2018-10-26: Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD…
• CVE-2018-11305 - CVSS 7.8 (high), 2018-10-26: When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in…
• CVE-2017-18124 - CVSS 7.8 (high), 2018-10-26: During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon…
• CVE-2017-18311 - CVSS 7.8 (high), 2018-10-26: XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in…
• CVE-2017-18313 - CVSS 5.3 (medium), 2018-10-23: Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored…
• CVE-2017-18300 - CVSS 5.5 (medium), 2018-10-23: Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile,…
• CVE-2017-18305 - CVSS 7 (high), 2018-10-23: XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version…
• CVE-2017-18299 - CVSS 5.5 (medium), 2018-10-23: Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in…
• CVE-2017-18304 - CVSS 7.8 (high), 2018-10-23: Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile,…
• CVE-2017-18303 - CVSS 7.8 (high), 2018-10-23: While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon…
• CVE-2017-18293 - CVSS 7.8 (high), 2018-10-23: When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding…
• CVE-2017-18296 - CVSS 7.8 (high), 2018-10-23: Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile,…
• CVE-2017-18292 - CVSS 5.5 (medium), 2018-10-23: Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear…
• CVE-2017-18295 - CVSS 7.8 (high), 2018-10-23: Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version…
• CVE-2017-18294 - CVSS 7.8 (high), 2018-10-23: While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC,…
• CVE-2017-18298 - CVSS 7.8 (high), 2018-10-23: Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206,…
• CVE-2017-18277 - CVSS 5.5 (medium), 2018-10-23: When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in…
• CVE-2017-18282 - CVSS 7.8 (high), 2018-10-23: Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607,…
• CVE-2018-11982 - CVSS 8.8 (high), 2018-09-20: In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425,…
• CVE-2018-5871 - CVSS 6.5 (medium), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD…
• CVE-2018-5837 - CVSS 7.5 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427,…
• CVE-2018-11269 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205,…
• CVE-2018-11287 - CVSS 9.8 (critical), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD…
• CVE-2018-11292 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD…
• CVE-2018-11285 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD…
• CVE-2018-11291 - CVSS 7.5 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU,…
• CVE-2018-11277 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD…
• CVE-2018-11290 - CVSS 7.5 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427,…
• CVE-2017-18314 - CVSS 9.8 (critical), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205,…
• CVE-2017-18280 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD…
• CVE-2018-11268 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205,…
• CVE-2018-11267 - CVSS 7.8 (high), 2018-09-20: In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425,…
• CVE-2018-5892 - CVSS 7.5 (high), 2018-07-06: The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
• CVE-2018-5891 - CVSS 8.4 (high), 2018-07-06: While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL…
• CVE-2018-5894 - CVSS 6.5 (medium), 2018-07-06: Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds…
• CVE-2018-5884 - CVSS 8.4 (high), 2018-07-06: Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of…
• CVE-2018-5875 - CVSS 8.8 (high), 2018-07-06: While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
• CVE-2018-5882 - CVSS 9.8 (critical), 2018-07-06: While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
• CVE-2018-5874 - CVSS 8.8 (high), 2018-07-06: While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
• CVE-2018-5878 - CVSS 9.8 (critical), 2018-07-06: While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon…
• CVE-2018-5885 - CVSS 9.8 (critical), 2018-07-06: While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.
• CVE-2018-5838 - CVSS 7.8 (high), 2018-07-06: Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can…
• CVE-2018-5876 - CVSS 8.8 (high), 2018-07-06: While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
• CVE-2018-11259 - CVSS 7.7 (high), 2018-07-06: Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the…
• CVE-2018-11258 - CVSS 7.8 (high), 2018-07-06: In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650,…
• CVE-2017-11088 - CVSS 9.8 (critical), 2018-07-06: Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU,…
• CVE-2016-10501 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607,…
• CVE-2016-10499 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
• CVE-2016-10497 - CVSS 7.5 (high), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
• CVE-2016-10491 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640,…
• CVE-2016-10494 - CVSS 9.8 (critical), 2018-04-18: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607,…