threat
engine
.sh
Back
·
··:··
Home
/
Product
/
qualcomm sd 210 firmware
Product
qualcomm sd 210 firmware
500 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2018-5852
all versions
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs com
8.4
HIGH
CVE-2018-11952
all versions
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
8.4
HIGH
CVE-2018-11922
all versions
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
9.8
CRITICAL
CVE-2017-11076
all versions
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder
9.8
CRITICAL
CVE-2021-30299
all versions
Possible out of bound access in audio module due to lack of validation of user provided input.
6.7
MEDIUM
CVE-2017-9711
all versions
Certain unprivileged processes are able to perform IOCTL calls.
6.7
MEDIUM
CVE-2023-28575
all versions
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invali
6.7
MEDIUM
CVE-2023-28537
all versions
Memory corruption while allocating memory in COmxApeDec module in Audio.
8.4
HIGH
CVE-2023-22666
all versions
Memory Corruption in Audio while playing amrwbplus clips with modified content.
8.4
HIGH
CVE-2023-21626
all versions
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
7.1
HIGH
CVE-2023-21625
all versions
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
8.2
HIGH
CVE-2022-40510
all versions
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
9.8
CRITICAL
CVE-2022-40537
all versions
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
7.3
HIGH
CVE-2022-40515
all versions
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
7.3
HIGH
CVE-2022-33213
all versions
Memory corruption in modem due to buffer overflow while processing a PPP packet
7.5
HIGH
CVE-2022-25705
all versions
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
7.8
HIGH
CVE-2022-25694
all versions
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
8.4
HIGH
CVE-2022-22075
all versions
Information Disclosure in Graphics during GPU context switch.
6.2
MEDIUM
CVE-2022-33248
all versions
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
7.8
HIGH
CVE-2022-33243
all versions
Memory corruption due to improper access control in Qualcomm IPC.
8.4
HIGH
CVE-2022-33233
all versions
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
7.8
HIGH
CVE-2022-33225
all versions
Memory corruption due to use after free in trusted application environment.
6.7
MEDIUM
CVE-2022-33266
all versions
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modif
5.9
MEDIUM
CVE-2022-33255
all versions
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from pe
8.2
HIGH
CVE-2022-25722
all versions
Information exposure in DSP services due to improper handling of freeing memory
6.0
MEDIUM
CVE-2022-25721
all versions
Memory corruption in video driver due to type confusion error during video playback
6.7
MEDIUM
CVE-2022-25717
all versions
Memory corruption in display due to double free while allocating frame buffer memory
6.7
MEDIUM
CVE-2022-25715
all versions
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
6.7
MEDIUM
CVE-2022-22088
all versions
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
9.8
CRITICAL
CVE-2022-22079
all versions
Denial of service while processing fastboot flash command on mmc due to buffer over read
4.6
MEDIUM
CVE-2022-33268
all versions
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon
8.2
HIGH
CVE-2022-25712
all versions
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon C
6.7
MEDIUM
CVE-2022-25711
all versions
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
6.7
MEDIUM
CVE-2022-25702
all versions
Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Comp
7.5
HIGH
CVE-2022-25695
all versions
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto,
8.4
HIGH
CVE-2022-25685
all versions
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapd
7.5
HIGH
CVE-2022-25682
all versions
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Sn
8.4
HIGH
CVE-2022-25677
all versions
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
6.7
MEDIUM
CVE-2022-25743
all versions
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdr
8.4
HIGH
CVE-2022-25724
all versions
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Sna
8.4
HIGH
CVE-2022-25720
all versions
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdrag
9.8
CRITICAL
CVE-2022-25719
all versions
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdrag
8.2
HIGH
CVE-2022-25718
all versions
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Co
9.1
CRITICAL
CVE-2022-25687
all versions
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne
7.3
HIGH
CVE-2022-25666
all versions
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon
6.7
MEDIUM
CVE-2022-25664
all versions
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon
6.2
MEDIUM
CVE-2022-22062
all versions
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Com
8.2
HIGH
CVE-2021-35112
all versions
A user with user level permission can access graphics protected region due to improper access control in register configuration in
8.4
HIGH
CVE-2021-35104
all versions
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compu
9.8
CRITICAL
CVE-2021-35100
all versions
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Comput
7.5
HIGH
CVE-2021-35083
all versions
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Sna
8.2
HIGH
CVE-2021-35072
all versions
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snap
7.8
HIGH
CVE-2021-30344
all versions
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Comp
7.5
HIGH
CVE-2021-30342
all versions
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received
9.1
CRITICAL
CVE-2021-30341
all versions
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapd
9.8
CRITICAL
CVE-2021-30334
all versions
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon
8.4
HIGH
CVE-2021-35105
all versions
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, S
8.4
HIGH
CVE-2021-30333
all versions
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Sna
7.8
HIGH
CVE-2021-30325
all versions
Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdr
6.7
MEDIUM
CVE-2021-30324
all versions
Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote proce
6.7
MEDIUM
CVE-2021-30323
all versions
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute
7.8
HIGH
CVE-2021-30318
all versions
Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute,
8.4
HIGH
CVE-2021-30353
all versions
Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon C
7.5
HIGH
CVE-2021-30330
all versions
Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec
7.5
HIGH
CVE-2021-30314
all versions
Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdr
6.2
MEDIUM
CVE-2021-30313
all versions
Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon
6.7
MEDIUM
CVE-2021-30300
all versions
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice w
7.5
HIGH
CVE-2021-30351
all versions
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapd
9.8
CRITICAL
CVE-2021-30337
all versions
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdrago
8.4
HIGH
CVE-2021-30335
all versions
Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Sn
8.4
HIGH
CVE-2021-30298
all versions
Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PC
6.7
MEDIUM
CVE-2021-30293
all versions
Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne
7.5
HIGH
CVE-2021-30289
all versions
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdr
7.8
HIGH
CVE-2021-30273
all versions
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, S
7.5
HIGH
CVE-2021-30272
all versions
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon
7.3
HIGH
CVE-2021-30271
all versions
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto,
7.3
HIGH
CVE-2021-30270
all versions
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Sn
7.3
HIGH
CVE-2021-30268
all versions
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Sna
7.8
HIGH
CVE-2021-30262
all versions
Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdra
8.4
HIGH
CVE-2021-30284
all versions
Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto
7.5
HIGH
CVE-2021-30266
all versions
Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon
6.7
MEDIUM
CVE-2021-30265
all versions
Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and
6.7
MEDIUM
CVE-2021-30264
all versions
Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon
6.7
MEDIUM
CVE-2021-30255
all versions
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapd
7.8
HIGH
CVE-2021-30254
all versions
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdra
7.8
HIGH
CVE-2021-1981
all versions
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Aut
7.5
HIGH
CVE-2021-1975
all versions
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Comput
9.8
CRITICAL
CVE-2021-1973
all versions
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit
7.8
HIGH
CVE-2021-1924
all versions
Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon
9.0
CRITICAL
CVE-2021-30310
all versions
Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Conn
7.5
HIGH
CVE-2021-30297
all versions
Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Au
8.4
HIGH
CVE-2021-30292
all versions
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Comp
8.4
HIGH
CVE-2021-30291
all versions
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Comp
8.4
HIGH
CVE-2021-30288
all versions
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Sn
8.4
HIGH
CVE-2021-30258
all versions
Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute
8.4
HIGH
CVE-2021-1985
all versions
Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Sn
8.4
HIGH
CVE-2021-1984
all versions
Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdrago
8.4
HIGH
CVE-2021-1983
all versions
Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdrag
8.4
HIGH
CVE-2021-1967
all versions
Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN
5.3
MEDIUM
CVE-2021-1959
all versions
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi
7.8
HIGH
CVE-2021-1936
all versions
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapd
7.5
HIGH
CVE-2020-11303
all versions
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapd
8.6
HIGH
CVE-2021-30261
all versions
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from
8.4
HIGH
CVE-2021-30260
all versions
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist
8.4
HIGH
CVE-2021-1976
all versions
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Com
9.8
CRITICAL
CVE-2021-1939
all versions
Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, S
8.4
HIGH
CVE-2021-30295
all versions
Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon A
8.4
HIGH
CVE-2021-1974
all versions
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapd
7.5
HIGH
CVE-2021-1963
all versions
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon
6.7
MEDIUM
CVE-2021-1962
all versions
Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum
6.7
MEDIUM
CVE-2021-1961
all versions
Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute
6.7
MEDIUM
CVE-2021-1946
all versions
Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Com
9.8
CRITICAL
CVE-2021-1935
all versions
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdra
7.1
HIGH
CVE-2021-1909
all versions
Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, S
7.3
HIGH
CVE-2021-1972
all versions
Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snap
9.8
CRITICAL
CVE-2021-1929
all versions
Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec
6.2
MEDIUM
CVE-2021-1928
all versions
Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdra
4.6
MEDIUM
CVE-2021-1920
all versions
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon C
9.8
CRITICAL
CVE-2021-1919
all versions
Integer underflow can occur when the RTCP length is lesser than the actual blocks present in Snapdragon Auto, Snapdragon Comp
9.8
CRITICAL
CVE-2021-1916
all versions
Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto,
9.8
CRITICAL
CVE-2021-1914
all versions
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Comput
7.5
HIGH
CVE-2021-1904
all versions
Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Sna
6.2
MEDIUM
CVE-2021-1955
all versions
Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon
7.5
HIGH
CVE-2021-1901
all versions
Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial
4.6
MEDIUM
CVE-2021-1899
all versions
Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial
4.6
MEDIUM
CVE-2021-1898
all versions
Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industr
4.6
MEDIUM
CVE-2021-1897
all versions
Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapd
4.6
MEDIUM
CVE-2020-11307
all versions
Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdrag
9.8
CRITICAL
CVE-2020-11304
all versions
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
7.8
HIGH
CVE-2020-11292
all versions
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapd
7.8
HIGH
CVE-2020-11267
all versions
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdra
8.4
HIGH
CVE-2020-11262
all versions
A race between command submission and destroying the context can cause an invalid context being added to the list leads to use aft
7.0
HIGH
CVE-2020-11261
all versions
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdra
7.8
HIGH
CVE-2020-11250
all versions
Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdrago
7.0
HIGH
CVE-2020-11240
all versions
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for t
7.8
HIGH
CVE-2020-11239
all versions
Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up proper
7.8
HIGH
CVE-2020-11235
all versions
Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdrag
7.8
HIGH
CVE-2020-11233
all versions
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc wi
7.0
HIGH
CVE-2020-11161
all versions
Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Sn
7.1
HIGH
CVE-2020-11159
all versions
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame po
9.1
CRITICAL
CVE-2021-1927
all versions
Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Com
8.4
HIGH
CVE-2021-1910
all versions
Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna
7.3
HIGH
CVE-2021-1906
all versions
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdra
6.2
MEDIUM
CVE-2021-1905
all versions
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapd
8.4
HIGH
CVE-2021-1895
all versions
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial I
6.8
MEDIUM
CVE-2021-1891
all versions
A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdra
8.4
HIGH
CVE-2020-11294
all versions
Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon
5.9
MEDIUM
CVE-2020-11289
all versions
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute,
7.8
HIGH
CVE-2020-11285
all versions
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon
8.2
HIGH
CVE-2020-11279
all versions
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto,
7.5
HIGH
CVE-2020-11255
all versions
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and r
7.5
HIGH
CVE-2020-11251
all versions
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon A
8.2
HIGH
CVE-2020-11247
all versions
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdrago
8.2
HIGH
CVE-2020-11246
all versions
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Comp
8.4
HIGH
CVE-2020-11234
all versions
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread r
8.4
HIGH
CVE-2020-11191
all versions
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute,
8.2
HIGH
CVE-2020-11309
all versions
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon
7.8
HIGH
CVE-2020-11299
all versions
Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
9.8
CRITICAL
CVE-2020-11290
all versions
Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snap
7.0
HIGH
CVE-2020-11227
all versions
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdrag
9.8
CRITICAL
CVE-2020-11226
all versions
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Comp
7.5
HIGH
CVE-2020-11221
all versions
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insuffi
5.5
MEDIUM
CVE-2020-11199
all versions
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in
5.5
MEDIUM
CVE-2020-11192
all versions
Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapd
9.8
CRITICAL
CVE-2020-11190
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1
CRITICAL
CVE-2020-11189
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1
CRITICAL
CVE-2020-11188
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1
CRITICAL
CVE-2020-11171
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1
CRITICAL
CVE-2020-11166
all versions
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in
9.1
CRITICAL
CVE-2020-11296
all versions
Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snap
7.5
HIGH
CVE-2020-11276
all versions
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation
9.1
CRITICAL
CVE-2020-11275
all versions
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapd
9.1
CRITICAL
CVE-2020-11272
all versions
Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version
9.8
CRITICAL
CVE-2020-11269
all versions
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Aut
8.8
HIGH
CVE-2020-11204
all versions
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for par
7.8
HIGH
CVE-2020-11195
all versions
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffe
7.8
HIGH
CVE-2020-11177
all versions
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device loc
8.8
HIGH
CVE-2020-11170
all versions
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction i
9.8
CRITICAL
CVE-2020-11163
all versions
Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received
9.8
CRITICAL
CVE-2020-11119
all versions
Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdra
7.5
HIGH
CVE-2019-10530
all versions
Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer
7.8
HIGH
CVE-2019-10520
all versions
An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory whi
5.5
MEDIUM
CVE-2019-2332
all versions
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute
9.8
CRITICAL
CVE-2019-2331
all versions
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon A
9.8
CRITICAL
CVE-2019-2325
all versions
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Aut
9.8
CRITICAL
CVE-2019-2324
all versions
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of bound
9.8
CRITICAL
CVE-2019-2323
all versions
Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Co
9.8
CRITICAL
CVE-2019-2285
all versions
Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snap
9.8
CRITICAL
CVE-2019-2283
all versions
Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snap
9.8
CRITICAL
CVE-2019-2275
all versions
While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key op
5.5
MEDIUM
CVE-2019-2258
all versions
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Com
9.8
CRITICAL
CVE-2019-10542
all versions
Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the cont
9.8
CRITICAL
CVE-2019-10541
all versions
Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdr
9.8
CRITICAL
CVE-2019-10534
all versions
Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdra
9.8
CRITICAL
CVE-2019-10533
all versions
Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapd
9.8
CRITICAL
CVE-2019-10531
all versions
Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdrag
9.8
CRITICAL
CVE-2019-10529
all versions
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirt
8.1
HIGH
CVE-2019-10528
all versions
Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon
9.8
CRITICAL
CVE-2019-10524
all versions
Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk
7.8
HIGH
CVE-2019-10522
all versions
While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8
CRITICAL
CVE-2019-10515
all versions
DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon A
5.5
MEDIUM
CVE-2019-10512
all versions
Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO
7.8
HIGH
CVE-2019-10505
all versions
Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdrag
9.8
CRITICAL
CVE-2019-10504
all versions
Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon
6.5
MEDIUM
CVE-2019-10502
all versions
Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consu
7.8
HIGH
CVE-2019-10496
all versions
Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon
7.8
HIGH
CVE-2019-10495
all versions
Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute,
7.3
HIGH
CVE-2019-10491
all versions
ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdra
7.8
HIGH
CVE-2019-10488
all versions
Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon
7.5
HIGH
CVE-2019-2341
all versions
Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon
7.8
HIGH
CVE-2019-2333
all versions
Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto
7.8
HIGH
CVE-2019-2294
all versions
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm kn
9.8
CRITICAL
CVE-2019-2252
all versions
Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdra
9.8
CRITICAL
CVE-2019-10539
all versions
Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snap
9.8
CRITICAL
CVE-2019-10508
all versions
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer
7.8
HIGH
CVE-2019-10507
all versions
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Co
7.8
HIGH
CVE-2019-10501
all versions
Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute,
7.8
HIGH
CVE-2019-10498
all versions
Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Sna
7.8
HIGH
CVE-2019-10497
all versions
Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the pr
7.8
HIGH
CVE-2019-10492
all versions
Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm
7.8
HIGH
CVE-2019-10489
all versions
Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5
HIGH
CVE-2019-2343
all versions
Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent fr
5.5
MEDIUM
CVE-2019-2334
all versions
Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snap
7.5
HIGH
CVE-2019-2328
all versions
Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon
7.8
HIGH
CVE-2019-2327
all versions
Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdrago
9.8
CRITICAL
CVE-2019-2326
all versions
Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdra
7.8
HIGH
CVE-2019-2322
all versions
Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
9.8
CRITICAL
CVE-2019-2312
all versions
When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received
7.8
HIGH
CVE-2019-2309
all versions
While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real dat
9.8
CRITICAL
CVE-2019-2307
all versions
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Sn
9.8
CRITICAL
CVE-2019-2306
all versions
Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Conne
7.8
HIGH
CVE-2019-2299
all versions
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Sna
7.8
HIGH
CVE-2019-2298
all versions
Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon C
7.8
HIGH
CVE-2019-2273
all versions
IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5
HIGH
CVE-2019-2272
all versions
Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snap
7.8
HIGH
CVE-2019-2263
all versions
Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connec
7.8
HIGH
CVE-2019-2254
all versions
Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdra
9.8
CRITICAL
CVE-2019-2253
all versions
Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity,
9.8
CRITICAL
CVE-2019-2241
all versions
While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done
5.5
MEDIUM
CVE-2019-2240
all versions
While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behav
5.5
MEDIUM
CVE-2019-2239
all versions
Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdrag
5.5
MEDIUM
CVE-2019-2238
all versions
Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to
7.8
HIGH
CVE-2019-2237
all versions
Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario a
5.5
MEDIUM
CVE-2018-13897
all versions
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Au
7.5
HIGH
CVE-2019-2292
all versions
Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Sn
7.8
HIGH
CVE-2019-2287
all versions
Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto,
9.8
CRITICAL
CVE-2019-2279
all versions
Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Co
9.8
CRITICAL
CVE-2019-2277
all versions
Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Comput
7.8
HIGH
CVE-2019-2261
all versions
Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdrag
5.5
MEDIUM
CVE-2019-2260
all versions
A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Co
7.0
HIGH
CVE-2019-2243
all versions
Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdr
5.5
MEDIUM
CVE-2018-13924
all versions
Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compu
9.8
CRITICAL
CVE-2019-2259
all versions
Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdrago
9.8
CRITICAL
CVE-2019-2257
all versions
Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdrago
7.8
HIGH
CVE-2019-2256
all versions
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto,
9.8
CRITICAL
CVE-2019-2255
all versions
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto,
9.8
CRITICAL
CVE-2018-5913
all versions
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdrago
7.8
HIGH
CVE-2018-5903
all versions
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon
7.8
HIGH
CVE-2018-13911
all versions
Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, S
9.8
CRITICAL
CVE-2018-13908
all versions
Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snap
7.8
HIGH
CVE-2018-13907
all versions
While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key o
5.3
MEDIUM
CVE-2018-13906
all versions
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged applicat
9.1
CRITICAL
CVE-2018-13902
all versions
Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA fi
7.5
HIGH
CVE-2018-13901
all versions
Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdrago
5.5
MEDIUM
CVE-2018-13898
all versions
Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electro
9.8
CRITICAL
CVE-2018-11955
all versions
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and resul
9.8
CRITICAL
CVE-2018-11947
all versions
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consu
5.5
MEDIUM
CVE-2018-11939
all versions
Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag
7.8
HIGH
CVE-2018-11934
all versions
Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdrago
7.8
HIGH
CVE-2017-8252
all versions
Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, S
5.5
MEDIUM
CVE-2019-2248
all versions
Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, S
7.8
HIGH
CVE-2019-2247
all versions
Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while usin
7.8
HIGH
CVE-2019-2245
all versions
Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later u
9.8
CRITICAL
CVE-2019-2244
all versions
Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later
9.8
CRITICAL
CVE-2018-13925
all versions
Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference cau
9.8
CRITICAL
CVE-2018-13895
all versions
Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileg
7.8
HIGH
CVE-2018-13887
all versions
Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
9.8
CRITICAL
CVE-2018-13886
all versions
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8
CRITICAL
CVE-2018-13885
all versions
Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,
5.5
MEDIUM
CVE-2018-12013
all versions
Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Comput
7.8
HIGH
CVE-2018-12012
all versions
While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-u
7.8
HIGH
CVE-2018-12005
all versions
An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I
5.5
MEDIUM
CVE-2018-12004
all versions
Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics
5.5
MEDIUM
CVE-2018-11976
all versions
ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon C
5.5
MEDIUM
CVE-2018-11968
all versions
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity
7.8
HIGH
CVE-2018-11953
all versions
While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdrago
9.8
CRITICAL
CVE-2018-11936
all versions
Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of
9.8
CRITICAL
CVE-2018-11928
all versions
Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute,
7.8
HIGH
CVE-2018-11927
all versions
Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find ev
7.8
HIGH
CVE-2018-11924
all versions
Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Co
7.8
HIGH
CVE-2018-11271
all versions
Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdrag
9.8
CRITICAL
CVE-2017-18279
all versions
Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, S
7.8
HIGH
CVE-2017-18278
all versions
An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than th
7.8
HIGH
CVE-2017-18276
all versions
Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snap
7.8
HIGH
CVE-2017-18275
all versions
A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile
5.5
MEDIUM
CVE-2017-18274
all versions
While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number
7.8
HIGH
CVE-2017-18157
all versions
A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MD
7.8
HIGH
CVE-2017-18156
all versions
While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile
7.8
HIGH
CVE-2017-18131
all versions
In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM
7.8
HIGH
CVE-2018-11966
all versions
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I
7.8
HIGH
CVE-2018-11958
all versions
Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapd
5.5
MEDIUM
CVE-2018-13914
all versions
Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon
7.8
HIGH
CVE-2018-13913
all versions
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consume
7.8
HIGH
CVE-2018-13912
all versions
Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snap
5.5
MEDIUM
CVE-2018-13905
all versions
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdrago
7.8
HIGH
CVE-2018-13900
all versions
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Sna
7.8
HIGH
CVE-2018-11945
all versions
Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow
9.8
CRITICAL
CVE-2018-11938
all versions
Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto,
7.8
HIGH
CVE-2018-11935
all versions
Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto,
5.3
MEDIUM
CVE-2018-11931
all versions
Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi
7.8
HIGH
CVE-2018-11864
all versions
Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdrago
5.5
MEDIUM
CVE-2018-11845
all versions
Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto,
5.5
MEDIUM
CVE-2018-11820
all versions
Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdrag
5.5
MEDIUM
CVE-2018-11289
all versions
Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overf
7.8
HIGH
CVE-2018-13888
all versions
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL
7.8
HIGH
CVE-2018-11899
all versions
While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Conne
7.8
HIGH
CVE-2018-11888
all versions
Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snap
7.8
HIGH
CVE-2018-11855
all versions
If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPD
7.8
HIGH
CVE-2018-11847
all versions
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt
7.8
HIGH
CVE-2018-5915
all versions
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versio
9.8
CRITICAL
CVE-2018-5881
all versions
Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon m
8.8
HIGH
CVE-2018-5880
all versions
Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snap
7.8
HIGH
CVE-2018-5879
all versions
Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versi
8.8
HIGH
CVE-2018-5869
all versions
Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in
7.8
HIGH
CVE-2018-5867
all versions
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wea
7.8
HIGH
CVE-2018-3595
all versions
Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon au
5.5
MEDIUM
CVE-2018-11999
all versions
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon we
5.5
MEDIUM
CVE-2018-11998
all versions
While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile
7.5
HIGH
CVE-2018-11288
all versions
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the inte
7.8
HIGH
CVE-2018-11284
all versions
Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updat
9.3
CRITICAL
CVE-2018-11279
all versions
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon m
8.8
HIGH
CVE-2017-8276
all versions
Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions M
7.8
HIGH
CVE-2017-18332
all versions
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdra
5.5
MEDIUM
CVE-2017-18331
all versions
Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9
7.8
HIGH
CVE-2017-18330
all versions
Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdr
7.8
HIGH
CVE-2017-18329
all versions
Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625
7.8
HIGH
CVE-2017-18328
all versions
Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9
7.8
HIGH
CVE-2017-18327
all versions
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdra
5.5
MEDIUM
CVE-2017-18326
all versions
Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9
5.5
MEDIUM
CVE-2017-18324
all versions
Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607,
5.5
MEDIUM
CVE-2017-18323
all versions
Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in
5.5
MEDIUM
CVE-2017-18322
all versions
Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, M
5.5
MEDIUM
CVE-2017-18319
all versions
Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625
5.5
MEDIUM
CVE-2017-18141
all versions
When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it ac
7.8
HIGH
CVE-2017-11004
all versions
A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versi
5.5
MEDIUM
CVE-2016-10502
all versions
While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapd
9.8
CRITICAL
CVE-2018-5918
all versions
Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdrag
7.8
HIGH
CVE-2018-5916
all versions
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdrag
6.5
MEDIUM
CVE-2018-5877
all versions
In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffe
7.8
HIGH
CVE-2018-11996
all versions
When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon
7.8
HIGH
CVE-2018-11994
all versions
SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdrago
7.8
HIGH
CVE-2018-11921
all versions
Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and c
7.8
HIGH
CVE-2018-11264
all versions
Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS i
7.8
HIGH
CVE-2017-18316
all versions
Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Sna
7.8
HIGH
CVE-2018-11871
all versions
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdr
7.8
HIGH
CVE-2018-11870
all versions
Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy
7.8
HIGH
CVE-2018-11866
all versions
Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in S
7.8
HIGH
CVE-2018-11865
all versions
Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdrago
7.8
HIGH
CVE-2018-5914
all versions
Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming
7.8
HIGH
CVE-2018-5866
all versions
While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in ve
7.8
HIGH
CVE-2018-3588
all versions
There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, S
7.8
HIGH
CVE-2018-11850
all versions
Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile,
7.8
HIGH
CVE-2018-11849
all versions
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automob
7.8
HIGH
CVE-2018-11846
all versions
The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version
4.7
MEDIUM
CVE-2018-11828
all versions
When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop whi
7.5
HIGH
CVE-2018-11824
all versions
A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, M
7.8
HIGH
CVE-2018-11305
all versions
When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mo
7.8
HIGH
CVE-2017-18311
all versions
XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configur
7.8
HIGH
CVE-2017-18310
all versions
ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996A
7.8
HIGH
CVE-2017-18308
all versions
Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in vers
7.8
HIGH
CVE-2017-18124
all versions
During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snap
7.8
HIGH
CVE-2017-18313
all versions
Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authentic
5.3
MEDIUM
CVE-2017-18305
all versions
XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile
7.0
HIGH
CVE-2017-18304
all versions
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC,
7.8
HIGH
CVE-2017-18303
all versions
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon A
7.8
HIGH
CVE-2017-18300
all versions
Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications i
5.5
MEDIUM
CVE-2017-18299
all versions
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mo
5.5
MEDIUM
CVE-2017-18298
all versions
Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We
7.8
HIGH
CVE-2017-18296
all versions
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automo
7.8
HIGH
CVE-2017-18295
all versions
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdr
7.8
HIGH
CVE-2017-18294
all versions
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 he
7.8
HIGH
CVE-2017-18293
all versions
When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypasse
7.8
HIGH
CVE-2017-18292
all versions
Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon
5.5
MEDIUM
CVE-2017-18283
all versions
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD
6.5
MEDIUM
CVE-2017-18282
all versions
Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in
7.8
HIGH
CVE-2017-18277
all versions
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retryin
5.5
MEDIUM
CVE-2017-18171
all versions
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in
8.8
HIGH
CVE-2017-18170
all versions
Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version
8.8
HIGH
CVE-2018-5871
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205
6.5
MEDIUM
CVE-2018-5837
all versions
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 2
7.5
HIGH
CVE-2018-11982
all versions
In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/
8.8
HIGH
CVE-2018-11292
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, S
7.8
HIGH
CVE-2018-11290
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 2
7.5
HIGH
CVE-2018-11287
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425,
9.8
CRITICAL
CVE-2018-11285
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425,
7.8
HIGH
CVE-2018-11277
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, S
7.8
HIGH
CVE-2018-11269
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8
7.8
HIGH
CVE-2018-11268
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8
7.8
HIGH
CVE-2018-11267
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212
7.8
HIGH
CVE-2017-18314
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8
9.8
CRITICAL
CVE-2017-18280
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD
7.8
HIGH
CVE-2018-5894
all versions
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdra
6.5
MEDIUM
CVE-2018-5892
all versions
The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
7.5
HIGH
CVE-2018-5891
all versions
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available
8.4
HIGH
CVE-2018-5885
all versions
While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon
9.8
CRITICAL
CVE-2018-5884
all versions
Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may a
8.4
HIGH
CVE-2018-5882
all versions
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile
9.8
CRITICAL
CVE-2018-5878
all versions
While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdr
9.8
CRITICAL
CVE-2018-5876
all versions
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
8.8
HIGH
CVE-2018-5875
all versions
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile
8.8
HIGH
CVE-2018-5874
all versions
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear
8.8
HIGH
CVE-2018-5838
all versions
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an
7.8
HIGH
CVE-2018-11259
all versions
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on
7.7
HIGH
CVE-2018-11258
all versions
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9
7.8
HIGH
CVE-2018-11257
all versions
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices i
7.8
HIGH
CVE-2017-11088
all versions
Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in v
9.8
CRITICAL
CVE-2016-10501
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FS
9.8
CRITICAL
CVE-2016-10499
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10498
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD
9.8
CRITICAL
CVE-2016-10497
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10496
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/
9.8
CRITICAL
CVE-2016-10494
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10493
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10492
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.1
CRITICAL
CVE-2016-10491
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10490
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10487
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10486
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9
9.8
CRITICAL
CVE-2016-10485
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, M
9.8
CRITICAL
CVE-2016-10484
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10482
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10481
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10480
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10479
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9607, MDM9615, MDM9635M, MDM9640, SD
9.8
CRITICAL
CVE-2016-10477
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, S
9.8
CRITICAL
CVE-2016-10476
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10475
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, S
9.8
CRITICAL
CVE-2016-10474
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10473
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10472
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10469
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5
HIGH
CVE-2016-10467
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212
9.8
CRITICAL
CVE-2016-10466
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10464
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10459
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9615, M
7.5
HIGH
CVE-2016-10458
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 410/12, SD 425
9.8
CRITICAL
CVE-2016-10457
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10456
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10455
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10451
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.8
HIGH
CVE-2016-10450
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FS
9.8
CRITICAL
CVE-2016-10449
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10448
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10447
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10446
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5
HIGH
CVE-2016-10444
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10443
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
6.8
MEDIUM
CVE-2016-10441
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10438
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FS
7.5
HIGH
CVE-2016-10437
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FS
7.5
HIGH
CVE-2016-10436
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FS
9.8
CRITICAL
CVE-2016-10435
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
8.1
HIGH
CVE-2016-10433
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
8.1
HIGH
CVE-2016-10431
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10429
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile,
7.5
HIGH
CVE-2016-10427
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10425
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10424
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2016-10422
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile,
9.8
CRITICAL
CVE-2016-10421
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10420
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
5.5
MEDIUM
CVE-2016-10418
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5
HIGH
CVE-2016-10417
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
8.1
HIGH
CVE-2016-10416
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10415
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2016-10414
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile,
9.8
CRITICAL
CVE-2016-10412
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FS
9.8
CRITICAL
CVE-2016-10411
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12
7.5
HIGH
CVE-2016-10410
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2016-10407
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12
9.8
CRITICAL
CVE-2016-10406
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/1
7.5
HIGH
CVE-2015-9224
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
9.8
CRITICAL
CVE-2015-9222
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
7.5
HIGH
CVE-2015-9220
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, M
9.8
CRITICAL
CVE-2015-9218
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
5.5
MEDIUM
CVE-2015-9217
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
7.8
HIGH
CVE-2015-9216
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2015-9213
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5
HIGH
CVE-2015-9212
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
9.8
CRITICAL
CVE-2015-9211
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2015-9210
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2015-9209
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8
CRITICAL
CVE-2015-9208
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, M
9.8
CRITICAL
CVE-2015-9207
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
9.8
CRITICAL
CVE-2015-9206
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
9.8
CRITICAL
CVE-2015-9205
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
9.8
CRITICAL
CVE-2015-9204
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
9.8
CRITICAL
CVE-2015-9203
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2015-9202
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
CVE-2015-9201
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8
CRITICAL
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin