threat
engine
.sh
Back
·
··:··
Home
/
Product
/
qualcomm msm8939 firmware
Product
qualcomm msm8939 firmware
47 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2020-11269
all versions
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Aut
8.8
HIGH
CVE-2019-14095
all versions
Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in S
9.8
CRITICAL
CVE-2019-14072
all versions
Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free an
7.0
HIGH
CVE-2019-14061
all versions
Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Au
7.5
HIGH
CVE-2019-10591
all versions
Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snap
7.5
HIGH
CVE-2019-10554
all versions
Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS
9.1
CRITICAL
CVE-2019-10552
all versions
Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cm
9.1
CRITICAL
CVE-2019-14057
all versions
Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Aut
9.1
CRITICAL
CVE-2019-14055
all versions
Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer acc
7.8
HIGH
CVE-2019-10590
all versions
Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, S
9.8
CRITICAL
CVE-2019-14017
all versions
Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdrag
9.8
CRITICAL
CVE-2019-14016
all versions
Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit
9.8
CRITICAL
CVE-2019-14013
all versions
While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read in
9.8
CRITICAL
CVE-2019-14006
all versions
Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdrago
9.8
CRITICAL
CVE-2019-14005
all versions
Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdr
9.8
CRITICAL
CVE-2019-14004
all versions
Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snap
9.8
CRITICAL
CVE-2019-14003
all versions
Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Sna
7.5
HIGH
CVE-2019-10611
all versions
Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon
9.8
CRITICAL
CVE-2019-10579
all versions
Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon C
9.1
CRITICAL
CVE-2019-10578
all versions
Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5
HIGH
CVE-2019-10548
all versions
While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same
7.8
HIGH
CVE-2019-10532
all versions
Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Sna
9.8
CRITICAL
CVE-2019-2242
all versions
Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
9.8
CRITICAL
CVE-2019-10607
all versions
Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in
7.8
HIGH
CVE-2019-10605
all versions
Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware i
7.8
HIGH
CVE-2019-10600
all versions
Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory
7.8
HIGH
CVE-2019-10595
all versions
Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware
7.8
HIGH
CVE-2019-10544
all versions
Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapd
7.8
HIGH
CVE-2019-10525
all versions
Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdr
9.8
CRITICAL
CVE-2019-10518
all versions
Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Sn
7.8
HIGH
CVE-2019-10517
all versions
Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapd
7.8
HIGH
CVE-2019-10516
all versions
Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdra
9.8
CRITICAL
CVE-2019-10500
all versions
While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon A
9.8
CRITICAL
CVE-2019-10487
all versions
Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Au
9.8
CRITICAL
CVE-2019-10480
all versions
Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapd
7.8
HIGH
CVE-2019-2321
all versions
Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Au
7.8
HIGH
CVE-2019-2320
all versions
Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Comp
9.8
CRITICAL
CVE-2019-10559
all versions
Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corrup
9.8
CRITICAL
CVE-2019-10511
all versions
Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum
9.8
CRITICAL
CVE-2019-10493
all versions
Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdra
9.8
CRITICAL
CVE-2019-10485
all versions
Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons
7.5
HIGH
CVE-2019-2303
all versions
SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute
9.8
CRITICAL
CVE-2019-2289
all versions
Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon A
9.8
CRITICAL
CVE-2019-2271
all versions
Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdrag
9.8
CRITICAL
CVE-2019-10490
all versions
Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto
5.5
MEDIUM
CVE-2019-10486
all versions
Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound
7.0
HIGH
CVE-2014-10050
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8996, MSM8939, MSM8976, MSM8917, SDM
9.8
CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin