Browse CVEs

HIGH 7.8 CVE-2019-14018 Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… Apq8053 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14021 Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size r… Apq8096au Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14105 Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapd… Sda845 Firmware No fix yet Fix from $1,9502020-04-16 HIGH 7.5 CVE-2019-14012 Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages … Msm8905 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.5 CVE-2019-14022 Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon… Apq8096au Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.1 CVE-2019-10623 Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in Snapdrago… Qcn7605 Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.1 CVE-2019-10625 Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Snapdragon … Apq8009 Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.1 CVE-2019-14104 Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon Compute,… Apq8053 Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.0 CVE-2019-14070 Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdrago… Apq8009 Firmware Patch available Fix from $1,9502020-04-16 MEDIUM 5.5 CVE-2019-14007 Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI… Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 MEDIUM 5.5 CVE-2019-14075 Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT… Mdm9607 Firmware Mitigation only Fix from $1,6002020-04-16 CRITICAL 9.8 CVE-2019-10588 Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon … Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-10589 Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute… Apq8017 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-10609 Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-10551 String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdrago… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-10610 Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapd… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-10622 Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, … Apq8009 Firmware Patch available Fix from $2,3002020-04-16 HIGH 7.8 CVE-2019-10556 Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Sn… Apq8009 Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-10575 Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon Consumer I… Sda845 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-10620 Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Elec… Apq8096au Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-10621 Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdrago… Nicobar Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.1 CVE-2019-10574 Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Apq8009 Firmware No fix yet Fix from $1,9502020-04-16 MEDIUM 5.5 CVE-2019-10608 Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take … Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 HIGH 7.8 CVE-2019-10547 When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Patch available Fix from $1,9502020-04-16 MEDIUM 5.5 CVE-2019-10483 Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 MEDIUM 5.5 CVE-2019-10523 Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… Apq8009 Firmware Mitigation only Fix from $1,6002020-04-16 CRITICAL 9.8 CVE-2019-14098 Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-2300 Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon C… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-2311 Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Comput… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-2317 The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto… Msm8905 Firmware Mitigation only Fix from $2,3002020-03-05