Browse CVEs

CRITICAL 9.8 CVE-2018-11271 Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdra… Mdm9206 Firmware Mitigation only Fix from $2,3002019-05-24 CRITICAL 9.8 CVE-2018-11936 Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access… Mdm9206 Firmware Mitigation only Fix from $2,3002019-05-24 CRITICAL 9.8 CVE-2018-13886 Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Elect… Mdm9150 Firmware Mitigation only Fix from $2,3002019-05-24 CRITICAL 9.8 CVE-2018-13887 Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrag… Mdm9150 Firmware Mitigation only Fix from $2,3002019-05-24 HIGH 7.8 CVE-2018-11923 Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdrag… Mdm9150 Firmware Mitigation only Fix from $1,9502019-05-24 HIGH 7.8 CVE-2018-11928 Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Ipq8074 Firmware Mitigation only Fix from $1,9502019-05-24 HIGH 7.8 CVE-2018-11968 Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… Ipq4019 Firmware Mitigation only Fix from $1,9502019-05-24 HIGH 7.8 CVE-2018-12012 While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be compromised… Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-24 HIGH 7.8 CVE-2018-12013 Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu… Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-24 HIGH 7.8 CVE-2018-13895 Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone … Mdm9150 Firmware Mitigation only Fix from $1,9502019-05-24 MEDIUM 5.5 CVE-2018-11976 ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… Ipq8074 Firmware Mitigation only Fix from $1,6002019-05-24 MEDIUM 5.5 CVE-2018-12004 Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snap… Mdm9206 Firmware Mitigation only Fix from $1,6002019-05-24 MEDIUM 5.5 CVE-2018-12005 An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… Mdm9150 Firmware Mitigation only Fix from $1,6002019-05-24 MEDIUM 5.5 CVE-2018-13885 Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… Mdm9150 Firmware Mitigation only Fix from $1,6002019-05-24 HIGH 7.8 CVE-2017-18131 In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD… Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18156 While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear i… Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18157 A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM… Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18173 In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 42… Sd 425 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18274 While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is … Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18276 Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mobile, Snap… Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18278 An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of … Mdm9206 Firmware Mitigation only Fix from $1,9502019-05-06 HIGH 7.8 CVE-2017-18279 Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in F… Fsm9055 Firmware Mitigation only Fix from $1,9502019-05-06 MEDIUM 5.5 CVE-2017-15841 When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, SD 427, S… Sd 410 Firmware Mitigation only Fix from $1,6002019-05-06 MEDIUM 5.5 CVE-2017-18275 A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear i… Mdm9206 Firmware Mitigation only Fix from $1,6002019-05-06 HIGH 7.8 CVE-2018-11830 Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snap… Mdm9206 Firmware Mitigation only Fix from $1,9502019-04-04 HIGH 7.8 CVE-2018-11966 Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… Mdm9150 Firmware Mitigation only Fix from $1,9502019-04-04 HIGH 7.8 CVE-2018-11970 TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdr… Mdm9206 Firmware Mitigation only Fix from $1,9502019-04-04 HIGH 7.8 CVE-2018-13918 kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operati… Mdm9150 Firmware Mitigation only Fix from $1,9502019-04-04 MEDIUM 5.5 CVE-2018-11958 Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Elec… Mdm9206 Firmware Mitigation only Fix from $1,6002019-04-04 MEDIUM 5.5 CVE-2018-11971 Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto,… Mdm9206 Firmware Mitigation only Fix from $1,6002019-04-04