Browse CVEs

CRITICAL 9.1 CVE-2019-14020 Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_in… Apq8053 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-14033 Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdra… Apq8053 Firmware No fix yet Fix from $2,3002020-04-16 HIGH 7.8 CVE-2019-14009 Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon A… Apq8009 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14018 Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… Apq8053 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14021 Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size r… Apq8096au Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14105 Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapd… Sda845 Firmware No fix yet Fix from $1,9502020-04-16 HIGH 7.5 CVE-2019-14012 Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages … Msm8905 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.5 CVE-2019-14022 Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon… Apq8096au Firmware Mitigation only Fix from $1,9502020-04-16 MEDIUM 5.5 CVE-2019-14007 Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI… Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 MEDIUM 5.5 CVE-2019-14075 Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT… Mdm9607 Firmware Mitigation only Fix from $1,6002020-04-16 CRITICAL 9.8 CVE-2019-10588 Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon … Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-10589 Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute… Apq8017 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-10609 Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-10551 String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdrago… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-10610 Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapd… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 HIGH 7.8 CVE-2019-10575 Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon Consumer I… Sda845 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.1 CVE-2019-10574 Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Apq8009 Firmware No fix yet Fix from $1,9502020-04-16 MEDIUM 5.5 CVE-2019-10608 Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take … Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 MEDIUM 5.5 CVE-2019-10483 Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 MEDIUM 5.5 CVE-2019-10523 Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 CRITICAL 9.8 CVE-2019-14098 Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-2300 Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon C… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-2311 Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Comput… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-2317 The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto… Msm8905 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-14045 Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon C… Apq8096au Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-14083 While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the a… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-14086 Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexp… Apq8098 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-14095 Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Sna… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-14097 Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Apq8096 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.1 CVE-2019-14082 Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics… Ipq8074 Firmware Mitigation only Fix from $2,3002020-03-05