Browse CVEs

MEDIUM 6.5 CVE-2019-10504 Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapd… Mdm9206 Firmware Mitigation only Fix from $1,6002019-11-06 MEDIUM 5.5 CVE-2019-10515 DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Con… Mdm9150 Firmware Patch available Fix from $1,6002019-11-06 HIGH 7.8 CVE-2019-10491 ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S… Ipq4019 Firmware Patch available Fix from $1,9502019-11-06 HIGH 7.8 CVE-2019-10496 Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Co… Msm8909w Firmware Mitigation only Fix from $1,9502019-11-06 HIGH 7.8 CVE-2019-10502 Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Msm8909w Firmware Patch available Fix from $1,9502019-11-06 HIGH 7.5 CVE-2019-10488 Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon… Mdm9150 Firmware Mitigation only Fix from $1,9502019-11-06 HIGH 7.3 CVE-2019-10495 Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… Msm8909w Firmware Mitigation only Fix from $1,9502019-11-06 CRITICAL 9.8 CVE-2019-10539 Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Sna… Ipq8074 Firmware Mitigation only Fix from $2,3002019-09-30 CRITICAL 9.8 CVE-2019-10540 Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Comput… Ipq8074 Firmware Mitigation only Fix from $2,3002019-09-30 CRITICAL 9.8 CVE-2019-2252 Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdrago… Mdm9650 Firmware Patch available Fix from $2,3002019-09-30 CRITICAL 9.8 CVE-2019-2294 Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdrag… Mdm9205 Firmware Patch available Fix from $2,3002019-09-30 HIGH 7.8 CVE-2019-2333 Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Comput… Mdm9150 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-2341 Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Co… Mdm9150 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.0 CVE-2019-2284 Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdra… Msm8909w Firmware Patch available Fix from $1,9502019-09-30 CRITICAL 9.8 CVE-2019-10509 Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… Msm8909w Firmware Patch available Fix from $2,3002019-09-30 CRITICAL 9.8 CVE-2019-10538 Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HL… Msm8909w Firmware Patch available Fix from $2,3002019-09-30 HIGH 8.2 CVE-2019-10510 BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdrag… Qcs405 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10492 Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/… Mdm9607 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10497 Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snap… Mdm9150 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10498 Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… Mdm9150 Firmware Mitigation only Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10499 Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon M… Ipq4019 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10501 Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… Mdm9150 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10506 While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space which could… Mdm9206 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10507 Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics … Mdm9150 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-10508 Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connect… Mdm9150 Firmware Patch available Fix from $1,9502019-09-30 HIGH 7.5 CVE-2019-10489 Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd… Mdm9206 Firmware Mitigation only Fix from $1,9502019-09-30 HIGH 7.8 CVE-2019-2346 Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapd… Ipq8074 Firmware Mitigation only Fix from $1,9502019-07-25 HIGH 7.5 CVE-2019-2334 Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… Mdm9150 Firmware Mitigation only Fix from $1,9502019-07-25 HIGH 7.0 CVE-2019-2345 Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial … Msm8909w Firmware Patch available Fix from $1,9502019-07-25 MEDIUM 5.5 CVE-2019-2343 Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver … Msm8909w Firmware Mitigation only Fix from $1,6002019-07-25