Browse CVEs

HIGH 7.5 CVE-2019-10591 Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $1,9502020-03-05 MEDIUM 5.5 CVE-2019-10616 Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,6002020-03-05 CRITICAL 9.8 CVE-2019-10526 Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum… Apq8009 Firmware Patch available Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-10546 Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8096 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.8 CVE-2019-10586 Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.1 CVE-2019-10550 Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon Compute, … Mdm9206 Firmware Mitigation only Fix from $2,3002020-03-05 CRITICAL 9.1 CVE-2019-10552 Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Aut… Apq8009 Firmware No fix yet Fix from $2,3002020-03-05 CRITICAL 9.1 CVE-2019-10553 Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon… Apq8009 Firmware No fix yet Fix from $2,3002020-03-05 CRITICAL 9.1 CVE-2019-10554 Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accep… Apq8009 Firmware No fix yet Fix from $2,3002020-03-05 CRITICAL 9.1 CVE-2019-10577 Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdrago… Apq8009 Firmware Mitigation only Fix from $2,3002020-03-05 HIGH 7.8 CVE-2018-11838 Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electro… Apq8053 Firmware Patch available Fix from $1,9502020-03-05 HIGH 7.8 CVE-2019-10569 Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snapdragon Co… Apq8053 Firmware Patch available Fix from $1,9502020-03-05 HIGH 7.5 CVE-2019-10549 Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Com… Msm8905 Firmware Mitigation only Fix from $1,9502020-03-05 CRITICAL 9.1 CVE-2019-14057 Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Mitigation only Fix from $2,3002020-02-07 CRITICAL 9.1 CVE-2019-14063 Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Ipq4019 Firmware Patch available Fix from $2,3002020-02-07 HIGH 7.8 CVE-2019-14060 Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to lack of … Apq8009 Firmware Mitigation only Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14088 Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto,… Apq8009 Firmware Patch available Fix from $1,9502020-02-07 CRITICAL 9.8 CVE-2019-10590 Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, … Apq8009 Firmware Mitigation only Fix from $2,3002020-02-07 HIGH 7.8 CVE-2019-10567 There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unint… Apq8009 Firmware Patch available Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14002 APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Snapdragon C… Apq8053 Firmware Mitigation only Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14040 Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Au… Apq8009 Firmware Patch available Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14041 During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physi… Apq8009 Firmware Patch available Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14044 Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consumer IOT, … Qcs605 Firmware Patch available Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14046 Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon C… Qcs605 Firmware Patch available Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14049 Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapdragon Aut… Apq8017 Firmware Patch available Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14051 Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdr… Mdm9206 Firmware Mitigation only Fix from $1,9502020-02-07 HIGH 7.8 CVE-2019-14055 Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Snapdragon A… Apq8009 Firmware Patch available Fix from $1,9502020-02-07 CRITICAL 9.8 CVE-2019-10611 Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14004 Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Apq8009 Firmware Patch available Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14005 Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8009 Firmware Patch available Fix from $2,3002020-01-21