Browse CVEs

HIGH 7.8 CVE-2018-5880 Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in vers… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 HIGH 7.5 CVE-2018-11998 While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wea… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-18 MEDIUM 5.5 CVE-2017-18332 Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in version… Mdm9607 Firmware Mitigation only Fix from $1,6002019-01-18 MEDIUM 5.5 CVE-2018-11999 Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9… Mdm9206 Firmware Mitigation only Fix from $1,6002019-01-18 MEDIUM 5.5 CVE-2018-3595 Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdrago… Mdm9206 Firmware Mitigation only Fix from $1,6002019-01-18 HIGH 7.8 CVE-2017-18328 Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM96… Mdm9206 Firmware Mitigation only Fix from $1,9502019-01-03 HIGH 7.8 CVE-2017-18329 Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640… Mdm9615 Firmware Mitigation only Fix from $1,9502019-01-03 HIGH 7.8 CVE-2017-18330 Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versio… Ipq8074 Firmware Mitigation only Fix from $1,9502019-01-03 HIGH 7.8 CVE-2017-18141 When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged … Ipq8074 Firmware Mitigation only Fix from $1,9502019-01-03 HIGH 7.8 CVE-2017-18320 QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions … Msm8996au Firmware Mitigation only Fix from $1,9502019-01-03 MEDIUM 5.5 CVE-2017-11004 A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM920… Ipq8074 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18319 Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645… Mdm9206 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18321 Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM9655, SD 835, SDA660. Mdm9650 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18322 Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MD… Mdm9206 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18323 Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, … Mdm9206 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18324 Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, … Mdm9206 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18326 Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9… Mdm9607 Firmware Mitigation only Fix from $1,6002019-01-03 MEDIUM 5.5 CVE-2017-18327 Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in version… Mdm9607 Firmware Mitigation only Fix from $1,6002019-01-03 CRITICAL 9.8 CVE-2016-10502 While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Sn… Mdm9206 Firmware Mitigation only Fix from $2,3002018-12-10 CRITICAL 9.8 CVE-2017-18318 Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD … Msm8996au Firmware Mitigation only Fix from $2,3002018-11-28 HIGH 7.8 CVE-2017-18315 Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600. Sd 600 Firmware No fix yet Fix from $1,9502018-11-28 HIGH 7.8 CVE-2017-18316 Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in ver… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2017-18317 Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon… Msm8996au Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-11264 Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automo… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-11921 Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SU… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-11994 SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdragon Mobile and Snapdr… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-11996 When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdrag… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-5870 While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24. Sd 835 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-5877 In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdrago… Mdm9206 Firmware Mitigation only Fix from $1,9502018-11-28 HIGH 7.8 CVE-2018-5912 Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996A… Msm8996au Firmware Mitigation only Fix from $1,9502018-11-28