Browse CVEs

CRITICAL 9.8 CVE-2019-2305 Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electro… Mdm9150 Firmware Patch available Fix from $2,3002019-07-25 CRITICAL 9.8 CVE-2019-2307 Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snap… Mdm9150 Firmware Patch available Fix from $2,3002019-07-25 CRITICAL 9.8 CVE-2019-2309 While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. in Snapdr… Mdm9150 Firmware Patch available Fix from $2,3002019-07-25 CRITICAL 9.8 CVE-2019-2322 Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… Mdm9150 Firmware Mitigation only Fix from $2,3002019-07-25 CRITICAL 9.8 CVE-2019-2327 Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… Mdm9150 Firmware Mitigation only Fix from $2,3002019-07-25 HIGH 8.8 CVE-2019-2316 When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdrago… Mdm9640 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2298 Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon … Mdm9150 Firmware Mitigation only Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2299 An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer El… Ipq4019 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2301 Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… Ipq4019 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2306 Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Mdm9150 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2308 User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in… Mdm9150 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2312 When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto,… Mdm9607 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2326 Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdrago… Mdm9150 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2328 Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon… Mdm9150 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.0 CVE-2019-2314 Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon … Msm8909w Firmware Patch available Fix from $1,9502019-07-25 MEDIUM 5.5 CVE-2019-2330 improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… Ipq4019 Firmware Patch available Fix from $1,6002019-07-25 CRITICAL 9.8 CVE-2019-2253 Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Mdm9150 Firmware Mitigation only Fix from $2,3002019-07-25 CRITICAL 9.8 CVE-2019-2254 Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, S… Mdm9150 Firmware Mitigation only Fix from $2,3002019-07-25 CRITICAL 9.8 CVE-2019-2276 Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Sna… Mdm9607 Firmware Patch available Fix from $2,3002019-07-25 HIGH 7.8 CVE-2019-2238 Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to bu… Mdm9206 Firmware Mitigation only Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2263 Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon … Ipq4019 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2272 Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT… Mdm9206 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2278 User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snap… Mdm9607 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2281 An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Con… Qcs405 Firmware Mitigation only Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2290 Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connect… Mdm9206 Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.8 CVE-2019-2293 Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IO… Msm8909w Firmware Patch available Fix from $1,9502019-07-25 HIGH 7.5 CVE-2019-2273 IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… Msm8909w Firmware Mitigation only Fix from $1,9502019-07-25 MEDIUM 5.5 CVE-2019-2236 Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… Ipq8074 Firmware Mitigation only Fix from $1,6002019-07-25 MEDIUM 5.5 CVE-2019-2237 Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic… Mdm9206 Firmware Mitigation only Fix from $1,6002019-07-25 MEDIUM 5.5 CVE-2019-2239 Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdra… Mdm9150 Firmware Mitigation only Fix from $1,6002019-07-25