Browse CVEs

HIGH 7.8 CVE-2019-10571 Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8017 Firmware Patch available Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-10592 Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in… Apq8017 Firmware Mitigation only Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-2288 Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Comp… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-2310 Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdra… Apq8009 Firmware Patch available Fix from $1,9502019-12-12 MEDIUM 5.5 CVE-2019-10545 Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Conne… Qcs605 Firmware Patch available Fix from $1,6002019-12-12 MEDIUM 5.5 CVE-2019-10618 Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390 Qca6390 Firmware Mitigation only Fix from $1,6002019-12-12 CRITICAL 9.8 CVE-2019-10493 Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S… Apq8053 Firmware No fix yet Fix from $2,3002019-12-12 CRITICAL 9.8 CVE-2019-10511 Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon … Apq8009 Firmware Mitigation only Fix from $2,3002019-12-12 HIGH 8.1 CVE-2019-10494 Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapd… Apq8009 Firmware Patch available Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-10530 Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Ind… Mdm9150 Firmware Patch available Fix from $1,9502019-12-12 HIGH 7.5 CVE-2019-10485 Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,9502019-12-12 MEDIUM 5.5 CVE-2019-10484 Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous comman… Apq8098 Firmware Mitigation only Fix from $1,6002019-12-12 MEDIUM 5.5 CVE-2019-10520 An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out o… Qcs405 Firmware Patch available Fix from $1,6002019-12-12 CRITICAL 9.8 CVE-2019-2303 SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum… Apq8009 Firmware Mitigation only Fix from $2,3002019-11-21 HIGH 7.8 CVE-2019-2315 While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-2329 Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapd… Mdm9205 Firmware Mitigation only Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-2339 Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapd… Mdm9205 Firmware Mitigation only Fix from $1,9502019-11-21 HIGH 7.5 CVE-2019-2335 While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8009 Firmware No fix yet Fix from $1,9502019-11-21 MEDIUM 5.5 CVE-2019-2318 Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdrag… Apq8017 Firmware Mitigation only Fix from $1,6002019-11-21 MEDIUM 5.5 CVE-2019-2336 Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapd… Mdm9205 Firmware Mitigation only Fix from $1,6002019-11-21 CRITICAL 9.8 CVE-2019-2268 Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, S… Apq8009 Firmware Patch available Fix from $2,3002019-11-21 CRITICAL 9.8 CVE-2019-2271 Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon… Apq8009 Firmware Mitigation only Fix from $2,3002019-11-21 CRITICAL 9.8 CVE-2019-2289 Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $2,3002019-11-21 HIGH 7.8 CVE-2019-2251 If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in S… Apq8016 Firmware Mitigation only Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-2266 Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT,… Apq8053 Firmware Patch available Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-2297 Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity… Apq8009 Firmware Patch available Fix from $1,9502019-11-21 MEDIUM 5.5 CVE-2019-2295 Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon … Apq8009 Firmware Mitigation only Fix from $1,6002019-11-21 CRITICAL 9.8 CVE-2019-10627 Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to in… Ips 001.1937c / 001.1937d+ Fix from $2,3002019-11-21 HIGH 7.8 CVE-2019-10566 Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, … Apq8017 Firmware Patch available Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-10617 Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA… Qca6174 Firmware Mitigation only Fix from $1,9502019-11-21