Browse CVEs

HIGH 7.8 CVE-2018-11950 Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850 Sd 845 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2018-3588 There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, S… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2018-5866 While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.5 CVE-2018-11828 When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get ra… Sd 210 Firmware Mitigation only Fix from $1,9502018-10-26 MEDIUM 5.5 CVE-2018-11951 Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 84… Sd 845 Firmware Mitigation only Fix from $1,6002018-10-26 HIGH 7.8 CVE-2017-18124 During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snap… Fsm9055 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2017-18308 Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM890… Mdm9607 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2017-18310 ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD… Msm8909w Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2017-18311 XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are ope… Mdm9607 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2018-11305 When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon We… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2018-11821 Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM… Ipq8074 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2018-11822 A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 Sd 835 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.1 CVE-2017-18309 A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850. Sd 845 Firmware Mitigation only Fix from $1,9502018-10-26 HIGH 7.8 CVE-2017-18303 While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdrag… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18312 While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same sta… Msm8996au Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.0 CVE-2017-18305 XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear i… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23 MEDIUM 5.5 CVE-2017-18299 Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon… Mdm9206 Firmware Mitigation only Fix from $1,6002018-10-23 MEDIUM 5.5 CVE-2017-18300 Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile… Mdm9206 Firmware Mitigation only Fix from $1,6002018-10-23 MEDIUM 5.3 CVE-2017-18313 Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware… Msm8909w Firmware Mitigation only Fix from $1,6002018-10-23 HIGH 7.8 CVE-2017-18293 When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresp… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18294 While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small … Fsm9055 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18295 Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in versio… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18296 Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mo… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18297 Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820. Sd 425 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18298 Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23 MEDIUM 5.5 CVE-2017-18292 Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdrag… Msm8909w Firmware Mitigation only Fix from $1,6002018-10-23 HIGH 8.8 CVE-2017-18170 Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD … Qca9379 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 8.8 CVE-2017-18171 Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile … Qca9379 Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18172 In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wrap… Mdm9635m Firmware Mitigation only Fix from $1,9502018-10-23 HIGH 7.8 CVE-2017-18282 Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, M… Mdm9206 Firmware Mitigation only Fix from $1,9502018-10-23