Browse CVEs

CRITICAL 9.8 CVE-2018-11945 Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto… Mdm9150 Firmware Mitigation only Fix from $2,3002019-02-25 CRITICAL 9.8 CVE-2018-13904 Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Mdm9206 Firmware Mitigation only Fix from $2,3002019-02-25 CRITICAL 9.1 CVE-2018-11932 Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… Mdm9650 Firmware Mitigation only Fix from $2,3002019-02-25 HIGH 7.8 CVE-2018-11289 Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon A… Ipq8074 Firmware Mitigation only Fix from $1,9502019-02-25 HIGH 7.8 CVE-2018-11931 Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… Mdm9150 Firmware Mitigation only Fix from $1,9502019-02-25 HIGH 7.8 CVE-2018-11938 Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute… Ipq8074 Firmware Mitigation only Fix from $1,9502019-02-25 HIGH 7.1 CVE-2018-5839 Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Snapdragon Auto Firmware Mitigation only Fix from $1,9502019-02-25 MEDIUM 5.5 CVE-2018-11820 Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon… Ipq8074 Firmware Mitigation only Fix from $1,6002019-02-25 MEDIUM 5.5 CVE-2018-11845 Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute,… Mdm9150 Firmware Mitigation only Fix from $1,6002019-02-25 MEDIUM 5.5 CVE-2018-11864 Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… Ipq8074 Firmware Mitigation only Fix from $1,6002019-02-25 MEDIUM 5.5 CVE-2018-11948 Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snap… Msm8996au Firmware Mitigation only Fix from $1,6002019-02-25 MEDIUM 5.3 CVE-2018-11935 Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute… Mdm9607 Firmware Mitigation only Fix from $1,6002019-02-25 HIGH 7.8 CVE-2018-11847 Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and… Ipq8074 Firmware Mitigation only Fix from $1,9502019-02-11 HIGH 7.8 CVE-2018-11855 If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Aut… Mdm9607 Firmware Mitigation only Fix from $1,9502019-02-11 HIGH 7.8 CVE-2018-11888 Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Sna… Mdm9607 Firmware Mitigation only Fix from $1,9502019-02-11 HIGH 7.8 CVE-2018-11899 While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Mdm9206 Firmware Mitigation only Fix from $1,9502019-02-11 HIGH 7.8 CVE-2018-13888 There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto… Mdm9206 Firmware Mitigation only Fix from $1,9502019-02-11 CRITICAL 9.8 CVE-2017-18160 AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in … Mdm9635m Firmware Mitigation only Fix from $2,3002019-01-18 CRITICAL 9.8 CVE-2018-5915 Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640… Mdm9607 Firmware Mitigation only Fix from $2,3002019-01-18 CRITICAL 9.3 CVE-2018-11284 Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server … Mdm9206 Firmware Mitigation only Fix from $2,3002019-01-18 HIGH 8.8 CVE-2018-11279 Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdrago… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 8.8 CVE-2018-11993 Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, … Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 8.8 CVE-2018-5879 Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM960… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 8.8 CVE-2018-5881 Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdrago… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2017-18331 Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM96… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2017-8276 Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MS… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2018-11288 Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snap… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2018-5867 Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM92… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2018-5868 Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD … Msm8996au Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.8 CVE-2018-5869 Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, M… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18