Home/Product/qualcomm sd 600 firmware
Product

qualcomm sd 600 firmware

83 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2019-2332
all versions
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute
9.8CRITICAL
CVE-2019-2331
all versions
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon A
9.8CRITICAL
CVE-2019-2324
all versions
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of bound
9.8CRITICAL
CVE-2019-10542
all versions
Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the cont
9.8CRITICAL
CVE-2019-10541
all versions
Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdr
9.8CRITICAL
CVE-2019-10534
all versions
Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdra
9.8CRITICAL
CVE-2019-10533
all versions
Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapd
9.8CRITICAL
CVE-2019-10522
all versions
While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8CRITICAL
CVE-2019-10488
all versions
Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon
7.5HIGH
CVE-2019-10508
all versions
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer
7.8HIGH
CVE-2019-10507
all versions
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Co
7.8HIGH
CVE-2019-10506
all versions
While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the use
7.8HIGH
CVE-2019-10489
all versions
Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5HIGH
CVE-2019-2334
all versions
Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snap
7.5HIGH
CVE-2019-2328
all versions
Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon
7.8HIGH
CVE-2019-2327
all versions
Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdrago
9.8CRITICAL
CVE-2019-2322
all versions
Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
9.8CRITICAL
CVE-2019-2312
all versions
When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received
7.8HIGH
CVE-2019-2307
all versions
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Sn
9.8CRITICAL
CVE-2019-2299
all versions
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Sna
7.8HIGH
CVE-2019-2253
all versions
Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity,
9.8CRITICAL
CVE-2019-2240
all versions
While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behav
5.5MEDIUM
CVE-2018-11955
all versions
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and resul
9.8CRITICAL
CVE-2019-2245
all versions
Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later u
9.8CRITICAL
CVE-2019-2244
all versions
Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later
9.8CRITICAL
CVE-2018-13925
all versions
Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference cau
9.8CRITICAL
CVE-2018-13887
all versions
Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
9.8CRITICAL
CVE-2018-13886
all versions
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8CRITICAL
CVE-2018-11968
all versions
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity
7.8HIGH
CVE-2018-11928
all versions
Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute,
7.8HIGH
CVE-2018-5877
all versions
In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffe
7.8HIGH
CVE-2018-11996
all versions
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon
7.8HIGH
CVE-2017-18315
all versions
Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.
7.8HIGH
CVE-2018-11871
all versions
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdr
7.8HIGH
CVE-2018-11870
all versions
Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy
7.8HIGH
CVE-2018-11849
all versions
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automob
7.8HIGH
CVE-2017-18303
all versions
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon A
7.8HIGH
CVE-2017-18277
all versions
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retryin
5.5MEDIUM
CVE-2018-11291
all versions
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA
7.5HIGH
CVE-2018-11267
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212
7.8HIGH
CVE-2018-5894
all versions
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdra
6.5MEDIUM
CVE-2018-5882
all versions
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile
9.8CRITICAL
CVE-2018-5876
all versions
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
8.8HIGH
CVE-2018-5875
all versions
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile
8.8HIGH
CVE-2018-5874
all versions
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
8.8HIGH
CVE-2018-5838
all versions
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an
7.8HIGH
CVE-2016-10481
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10479
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9607, MDM9615, MDM9635M, MDM9640, SD
9.8CRITICAL
CVE-2016-10473
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10472
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10464
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10456
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10441
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10420
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
5.5MEDIUM
CVE-2016-10416
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10415
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10412
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FS
9.8CRITICAL
CVE-2015-9224
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
9.8CRITICAL
CVE-2015-9223
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD
9.8CRITICAL
CVE-2015-9213
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2015-9209
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2015-9201
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9190
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, M
9.8CRITICAL
CVE-2015-9189
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, M
7.5HIGH
CVE-2015-9188
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9185
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9180
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9167
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD
9.8CRITICAL
CVE-2015-9157
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, M
9.8CRITICAL
CVE-2015-9148
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9
9.8CRITICAL
CVE-2015-9143
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, M
9.8CRITICAL
CVE-2015-9140
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FS
7.5HIGH
CVE-2015-9138
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
9.8CRITICAL
CVE-2015-9137
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2015-9136
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2015-9123
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FS
7.5HIGH
CVE-2015-9120
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2014-9990
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2014-9989
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2014-10062
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2014-10054
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2014-10048
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2017-17773
all versions
In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,
9.8CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin