Browse CVEs

CRITICAL 9.8 CVE-2019-14006 Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14013 While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Sna… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14014 Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer IOT, Sna… Nicobar Firmware Mitigation only Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14016 Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… Apq8009 Firmware Patch available Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-14017 Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon… Apq8009 Firmware Patch available Fix from $2,3002020-01-21 HIGH 7.8 CVE-2019-14023 String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before s… Mdm9607 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-14024 Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, M… Msm8917 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-14034 Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon Auto, Snapdragon Compute, Snap… Apq8009 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-14036 Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, Snapdragon Consumer Electronic… Apq8064 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-2267 Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Co… Mdm9205 Firmware Mitigation only Fix from $1,9502020-01-21 HIGH 7.5 CVE-2019-14003 Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Auto, Snapd… Apq8009 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.5 CVE-2019-14008 Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Snapdragon A… Mdm9150 Firmware Mitigation only Fix from $1,9502020-01-21 HIGH 7.5 CVE-2019-14010 The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which happens to b… Mdm9607 Firmware Patch available Fix from $1,9502020-01-21 CRITICAL 9.8 CVE-2019-10532 Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivit… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 CRITICAL 9.8 CVE-2019-10581 NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdr… Apq8009 Firmware Patch available Fix from $2,3002020-01-21 CRITICAL 9.1 CVE-2019-10579 Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… Apq8009 Firmware Mitigation only Fix from $2,3002020-01-21 HIGH 7.8 CVE-2019-10548 While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon… Apq8009 Firmware Mitigation only Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-10558 While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Aut… Apq8009 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-10582 Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon … Apq8096au Firmware Mitigation only Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-10583 Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… Apq8096au Firmware Mitigation only Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-10585 Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in … Apq8009 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-10602 Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer … Apq8053 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.8 CVE-2019-10606 Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer E… Mdm9607 Firmware Patch available Fix from $1,9502020-01-21 HIGH 7.5 CVE-2019-10578 Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… Apq8009 Firmware Mitigation only Fix from $1,9502020-01-21 MEDIUM 5.5 CVE-2019-10561 Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Sn… Apq8009 Firmware Mitigation only Fix from $1,6002020-01-21 HIGH 7.8 CVE-2019-2274 Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivi… Apq8017 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-2304 Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Elec… Ipq4019 Firmware Patch available Fix from $1,9502019-12-18 CRITICAL 9.8 CVE-2019-10557 Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electroni… Apq8009 Firmware Patch available Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-10572 Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Sn… Apq8009 Firmware Patch available Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-10614 Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware i… Apq8009 Firmware Patch available Fix from $2,3002019-12-18