Browse CVEs

CRITICAL 9.8 CVE-2019-2242 Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connect… Apq8009 Firmware Mitigation only Fix from $2,3002019-12-18 HIGH 7.8 CVE-2019-10544 Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto, Snapdra… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10564 Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Co… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10584 Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10595 Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10598 Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further wi… Apq8053 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10600 Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in Snapdragon Auto… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10601 Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Auto, Sna… Apq8096au Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10605 Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, … Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10607 Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, S… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 CRITICAL 9.8 CVE-2019-10487 Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Comp… Apq8009 Firmware Mitigation only Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-10500 While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-10516 Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdr… Apq8009 Firmware No fix yet Fix from $2,3002019-12-18 CRITICAL 9.8 CVE-2019-10525 Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002019-12-18 HIGH 7.8 CVE-2019-10480 Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto, Snapdra… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10481 Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in Snapdrago… Apq8096au Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10517 Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10518 Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10536 Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first cal… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 HIGH 7.8 CVE-2019-10537 Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually… Mdm9607 Firmware Patch available Fix from $1,9502019-12-18 MEDIUM 5.9 CVE-2019-10482 Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI… Apq8009 Firmware Mitigation only Fix from $1,6002019-12-18 MEDIUM 5.5 CVE-2019-10513 Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $1,6002019-12-18 HIGH 7.8 CVE-2018-11980 When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both c… Apq8009 Firmware Patch available Fix from $1,9502019-12-18 CRITICAL 9.8 CVE-2019-2320 Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… Apq8009 Firmware Mitigation only Fix from $2,3002019-12-12 HIGH 7.8 CVE-2019-2319 HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Mdm9205 Firmware Mitigation only Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-2321 Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Comp… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-2337 While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown… Apq8053 Firmware Mitigation only Fix from $1,9502019-12-12 HIGH 7.1 CVE-2019-2338 Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in Snapdrago… Mdm9205 Firmware Mitigation only Fix from $1,9502019-12-12 CRITICAL 9.8 CVE-2019-10559 Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon … Apq8009 Firmware Mitigation only Fix from $2,3002019-12-12 HIGH 7.8 CVE-2019-10555 Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, … Apq8017 Firmware Patch available Fix from $1,9502019-12-12