Browse CVEs

MEDIUM 5.5 CVE-2019-2241 While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to unintend… Mdm9150 Firmware Mitigation only Fix from $1,6002019-07-25 HIGH 7.8 CVE-2019-2235 Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon … Mdm9206 Firmware Mitigation only Fix from $1,9502019-07-25 CRITICAL 9.8 CVE-2018-13924 Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Ipq8074 Firmware Mitigation only Fix from $2,3002019-07-22 HIGH 7.8 CVE-2018-13896 XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage… Mdm9206 Firmware Mitigation only Fix from $1,9502019-07-22 HIGH 7.8 CVE-2018-13927 Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon A… Mdm9206 Firmware Mitigation only Fix from $1,9502019-07-22 MEDIUM 5.5 CVE-2019-2243 Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdragon Auto, Snapdrag… Mdm9206 Firmware Mitigation only Fix from $1,6002019-07-22 MEDIUM 5.5 CVE-2019-2261 Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon… Ipq8074 Firmware Mitigation only Fix from $1,6002019-07-22 CRITICAL 9.8 CVE-2019-2255 An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute… Msm8909w Firmware Mitigation only Fix from $2,3002019-06-14 CRITICAL 9.8 CVE-2019-2256 An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute… Mdm9650 Firmware Mitigation only Fix from $2,3002019-06-14 CRITICAL 9.8 CVE-2019-2259 Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute, Snapdrag… Msm8909w Firmware Mitigation only Fix from $2,3002019-06-14 HIGH 7.8 CVE-2019-2257 Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna… Mdm9150 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.8 CVE-2018-13919 Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon A… Mdm9150 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.8 CVE-2018-5883 Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indus… Mdm9206 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.8 CVE-2018-5903 Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon C… Mdm9206 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.8 CVE-2018-5911 Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industri… Mdm9150 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.8 CVE-2018-5913 A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdrag… Mdm9150 Firmware Mitigation only Fix from $1,9502019-06-14 CRITICAL 9.8 CVE-2018-13898 Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, … Mdm9150 Firmware Mitigation only Fix from $2,3002019-06-14 CRITICAL 9.8 CVE-2018-13911 Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer … Mdm9150 Firmware Mitigation only Fix from $2,3002019-06-14 CRITICAL 9.1 CVE-2018-13906 The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snap… Ipq4019 Firmware Mitigation only Fix from $2,3002019-06-14 HIGH 7.8 CVE-2018-13908 Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Sna… Ipq8074 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.8 CVE-2018-13910 Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Elec… Ipq8074 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.5 CVE-2018-13902 Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Au… Mdm9150 Firmware Mitigation only Fix from $1,9502019-06-14 HIGH 7.0 CVE-2018-13909 Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in … Mdm9206 Firmware Mitigation only Fix from $1,9502019-06-14 MEDIUM 5.5 CVE-2017-8252 Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, … Ipq4019 Firmware Mitigation only Fix from $1,6002019-06-14 MEDIUM 5.5 CVE-2018-13901 Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon … Mdm9206 Firmware Mitigation only Fix from $1,6002019-06-14 MEDIUM 5.3 CVE-2018-13907 While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invok… Pq4019 Firmware Mitigation only Fix from $1,6002019-06-14 CRITICAL 9.8 CVE-2018-13925 Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after… Mdm9206 Firmware Mitigation only Fix from $2,3002019-05-24 CRITICAL 9.8 CVE-2019-2244 Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from … Mdm9206 Firmware Mitigation only Fix from $2,3002019-05-24 HIGH 7.8 CVE-2018-13920 Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer … Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-24 HIGH 7.8 CVE-2019-2250 Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… Qcs605 Firmware Mitigation only Fix from $1,9502019-05-24