Home/Product/qualcomm sd 850 firmware
Product

qualcomm sd 850 firmware

453 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2017-18307
all versions
Information disclosure possible while audio playback.
8.4HIGH
CVE-2017-18306
all versions
Information disclosure due to uninitialized variable.
8.4HIGH
CVE-2018-11922
all versions
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
9.8CRITICAL
CVE-2017-17772
all versions
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
9.8CRITICAL
CVE-2017-15832
all versions
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
8.4HIGH
CVE-2016-10394
all versions
Initial xbl_sec revision does not have all the debug policy features and critical checks.
8.4HIGH
CVE-2023-21664
all versions
Memory Corruption in Core Platform while printing the response buffer in log.
7.8HIGH
CVE-2023-21662
all versions
Memory corruption in Core Platform while printing the response buffer in log.
7.8HIGH
CVE-2023-21651
all versions
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
9.3CRITICAL
CVE-2023-21626
all versions
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
7.1HIGH
CVE-2022-40510
all versions
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
9.8CRITICAL
CVE-2022-40531
all versions
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
8.4HIGH
CVE-2022-33257
all versions
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
9.3CRITICAL
CVE-2022-33213
all versions
Memory corruption in modem due to buffer overflow while processing a PPP packet
7.5HIGH
CVE-2022-25705
all versions
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
7.8HIGH
CVE-2022-25694
all versions
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
8.4HIGH
CVE-2022-25655
all versions
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
8.4HIGH
CVE-2022-40514
all versions
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc respo
9.8CRITICAL
CVE-2022-40512
all versions
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
7.5HIGH
CVE-2022-33277
all versions
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
8.4HIGH
CVE-2022-33271
all versions
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
8.2HIGH
CVE-2022-33248
all versions
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
7.8HIGH
CVE-2022-33233
all versions
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
7.8HIGH
CVE-2022-33232
all versions
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory
9.3CRITICAL
CVE-2022-40520
all versions
Memory corruption due to stack-based buffer overflow in Core
8.4HIGH
CVE-2022-40519
all versions
Information disclosure due to buffer overread in Core
6.8MEDIUM
CVE-2022-40518
all versions
Information disclosure due to buffer overread in Core
6.8MEDIUM
CVE-2022-40517
all versions
Memory corruption in core due to stack-based buffer overflow
8.4HIGH
CVE-2022-40516
all versions
Memory corruption in Core due to stack-based buffer overflow.
8.4HIGH
CVE-2022-33286
all versions
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
7.5HIGH
CVE-2022-33285
all versions
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
7.5HIGH
CVE-2022-25746
all versions
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.
8.1HIGH
CVE-2022-33238
all versions
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Sna
7.5HIGH
CVE-2022-33235
all versions
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto
8.2HIGH
CVE-2022-25695
all versions
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto,
8.4HIGH
CVE-2022-25682
all versions
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Sn
8.4HIGH
CVE-2022-25681
all versions
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor tran
8.4HIGH
CVE-2022-33237
all versions
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Sna
7.5HIGH
CVE-2022-25749
all versions
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Sna
7.5HIGH
CVE-2022-25748
all versions
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Comp
9.8CRITICAL
CVE-2022-25736
all versions
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Comput
7.5HIGH
CVE-2022-25665
all versions
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrag
6.8MEDIUM
CVE-2022-25663
all versions
Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapd
5.5MEDIUM
CVE-2022-25661
all versions
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,
8.4HIGH
CVE-2022-25660
all versions
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I
7.8HIGH
CVE-2022-25690
all versions
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Au
7.5HIGH
CVE-2022-22091
all versions
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Comp
7.5HIGH
CVE-2022-22070
all versions
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon C
7.8HIGH
CVE-2022-22062
all versions
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Com
8.2HIGH
CVE-2021-35135
all versions
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
6.2MEDIUM
CVE-2021-35113
all versions
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in S
7.3HIGH
CVE-2021-35097
all versions
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in S
7.3HIGH
CVE-2021-35083
all versions
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Sna
8.2HIGH
CVE-2021-30350
all versions
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Sn
8.4HIGH
CVE-2021-30344
all versions
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Comp
7.5HIGH
CVE-2021-30342
all versions
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received
9.1CRITICAL
CVE-2021-30341
all versions
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapd
9.8CRITICAL
CVE-2021-30338
all versions
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compute
7.1HIGH
CVE-2021-30333
all versions
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Sna
7.8HIGH
CVE-2021-30323
all versions
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute
7.8HIGH
CVE-2021-30322
all versions
Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdrago
7.8HIGH
CVE-2021-30317
all versions
Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdrago
9.3CRITICAL
CVE-2021-30308
all versions
Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon A
7.8HIGH
CVE-2021-30300
all versions
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice w
7.5HIGH
CVE-2021-30348
all versions
Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapd
6.5MEDIUM
CVE-2021-30303
all versions
Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon
7.8HIGH
CVE-2021-30289
all versions
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdr
7.8HIGH
CVE-2021-30278
all versions
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon
7.1HIGH
CVE-2021-30275
all versions
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Au
9.3CRITICAL
CVE-2021-30272
all versions
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon
7.3HIGH
CVE-2021-30271
all versions
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto,
7.3HIGH
CVE-2021-30270
all versions
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Sn
7.3HIGH
CVE-2021-30269
all versions
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute,
7.3HIGH
CVE-2021-30268
all versions
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Sna
7.8HIGH
CVE-2021-30267
all versions
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon C
7.8HIGH
CVE-2021-1894
all versions
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon
7.1HIGH
CVE-2021-30259
all versions
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdrag
7.8HIGH
CVE-2021-30255
all versions
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapd
7.8HIGH
CVE-2021-1979
all versions
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
7.8HIGH
CVE-2021-1975
all versions
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Comput
9.8CRITICAL
CVE-2021-1973
all versions
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit
7.8HIGH
CVE-2021-1924
all versions
Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon
9.0CRITICAL
CVE-2021-1903
all versions
Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe res
5.3MEDIUM
CVE-2021-30288
all versions
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Sn
8.4HIGH
CVE-2021-1980
all versions
Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Sna
7.5HIGH
CVE-2021-1959
all versions
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi
7.8HIGH
CVE-2021-30261
all versions
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from
8.4HIGH
CVE-2021-30260
all versions
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist
8.4HIGH
CVE-2021-1941
all versions
Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute,
7.5HIGH
CVE-2021-1935
all versions
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdra
7.1HIGH
CVE-2021-1933
all versions
UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8CRITICAL
CVE-2021-1909
all versions
Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, S
7.3HIGH
CVE-2021-1920
all versions
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon C
9.8CRITICAL
CVE-2021-1919
all versions
Integer underflow can occur when the RTCP length is lesser than the actual blocks present in Snapdragon Auto, Snapdragon Comp
9.8CRITICAL
CVE-2021-1916
all versions
Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto,
9.8CRITICAL
CVE-2021-1914
all versions
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Comput
7.5HIGH
CVE-2020-11301
all versions
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapd
9.1CRITICAL
CVE-2021-1953
all versions
Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Sna
7.5HIGH
CVE-2021-1938
all versions
Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapd
7.5HIGH
CVE-2021-1896
all versions
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdra
4.3MEDIUM
CVE-2021-1890
all versions
Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon
8.4HIGH
CVE-2021-1889
all versions
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
8.4HIGH
CVE-2021-1888
all versions
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon
8.4HIGH
CVE-2021-1886
all versions
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapd
8.4HIGH
CVE-2020-11304
all versions
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
7.8HIGH
CVE-2020-11292
all versions
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapd
7.8HIGH
CVE-2020-11241
all versions
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Sn
7.5HIGH
CVE-2020-11238
all versions
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute,
7.5HIGH
CVE-2020-11235
all versions
Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdrag
7.8HIGH
CVE-2020-11182
all versions
Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snap
9.8CRITICAL
CVE-2020-11178
all versions
Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memor
7.8HIGH
CVE-2020-11159
all versions
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame po
9.1CRITICAL
CVE-2020-11126
all versions
Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon
9.1CRITICAL
CVE-2021-1925
all versions
Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compu
7.5HIGH
CVE-2020-11293
all versions
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length rece
5.1MEDIUM
CVE-2020-11289
all versions
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute,
7.8HIGH
CVE-2020-11288
all versions
Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon
7.8HIGH
CVE-2020-11285
all versions
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon
8.2HIGH
CVE-2020-11279
all versions
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto,
7.5HIGH
CVE-2021-1892
all versions
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdra
8.4HIGH
CVE-2020-11255
all versions
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and r
7.5HIGH
CVE-2020-11251
all versions
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon A
8.2HIGH
CVE-2020-11191
all versions
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute,
8.2HIGH
CVE-2020-11227
all versions
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdrag
9.8CRITICAL
CVE-2020-11226
all versions
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Comp
7.5HIGH
CVE-2020-11221
all versions
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insuffi
5.5MEDIUM
CVE-2020-11199
all versions
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in
5.5MEDIUM
CVE-2020-11192
all versions
Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapd
9.8CRITICAL
CVE-2020-11190
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1CRITICAL
CVE-2020-11189
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1CRITICAL
CVE-2020-11188
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1CRITICAL
CVE-2020-11171
all versions
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Sna
9.1CRITICAL
CVE-2020-11166
all versions
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in
9.1CRITICAL
CVE-2020-3664
all versions
Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snap
6.0MEDIUM
CVE-2020-11296
all versions
Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snap
7.5HIGH
CVE-2020-11280
all versions
Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due
7.5HIGH
CVE-2020-11276
all versions
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation
9.1CRITICAL
CVE-2020-11275
all versions
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapd
9.1CRITICAL
CVE-2020-11270
all versions
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM
7.5HIGH
CVE-2020-11269
all versions
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Aut
8.8HIGH
CVE-2020-11204
all versions
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for par
7.8HIGH
CVE-2020-11198
all versions
Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage o
6.7MEDIUM
CVE-2020-11195
all versions
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffe
7.8HIGH
CVE-2020-11177
all versions
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device loc
8.8HIGH
CVE-2020-11170
all versions
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction i
9.8CRITICAL
CVE-2020-11119
all versions
Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdra
7.5HIGH
CVE-2019-10530
all versions
Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer
7.8HIGH
CVE-2019-10520
all versions
An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory whi
5.5MEDIUM
CVE-2019-2332
all versions
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute
9.8CRITICAL
CVE-2019-2331
all versions
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon A
9.8CRITICAL
CVE-2019-2325
all versions
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Aut
9.8CRITICAL
CVE-2019-2324
all versions
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of bound
9.8CRITICAL
CVE-2019-2323
all versions
Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Co
9.8CRITICAL
CVE-2019-2285
all versions
Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snap
9.8CRITICAL
CVE-2019-2283
all versions
Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snap
9.8CRITICAL
CVE-2019-2275
all versions
While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key op
5.5MEDIUM
CVE-2019-2258
all versions
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Com
9.8CRITICAL
CVE-2019-2249
all versions
Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Com
9.8CRITICAL
CVE-2019-2246
all versions
Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdr
7.8HIGH
CVE-2019-10542
all versions
Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the cont
9.8CRITICAL
CVE-2019-10541
all versions
Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdr
9.8CRITICAL
CVE-2019-10534
all versions
Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdra
9.8CRITICAL
CVE-2019-10533
all versions
Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapd
9.8CRITICAL
CVE-2019-10529
all versions
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirt
8.1HIGH
CVE-2019-10524
all versions
Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk
7.8HIGH
CVE-2019-10522
all versions
While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8CRITICAL
CVE-2019-10515
all versions
DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon A
5.5MEDIUM
CVE-2019-10512
all versions
Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO
7.8HIGH
CVE-2019-10505
all versions
Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdrag
9.8CRITICAL
CVE-2019-10504
all versions
Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon
6.5MEDIUM
CVE-2019-10502
all versions
Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consu
7.8HIGH
CVE-2019-10496
all versions
Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon
7.8HIGH
CVE-2019-10495
all versions
Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute,
7.3HIGH
CVE-2019-10491
all versions
ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdra
7.8HIGH
CVE-2019-10488
all versions
Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon
7.5HIGH
CVE-2019-2341
all versions
Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon
7.8HIGH
CVE-2019-2333
all versions
Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto
7.8HIGH
CVE-2019-2294
all versions
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm kn
9.8CRITICAL
CVE-2019-2284
all versions
Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Co
7.0HIGH
CVE-2019-2252
all versions
Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdra
9.8CRITICAL
CVE-2019-10540
all versions
Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto
9.8CRITICAL
CVE-2019-10539
all versions
Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snap
9.8CRITICAL
CVE-2019-10538
all versions
Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range whic
9.8CRITICAL
CVE-2019-10510
all versions
BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdr
8.2HIGH
CVE-2019-10509
all versions
Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
9.8CRITICAL
CVE-2019-10507
all versions
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Co
7.8HIGH
CVE-2019-10506
all versions
While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the use
7.8HIGH
CVE-2019-10501
all versions
Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute,
7.8HIGH
CVE-2019-10498
all versions
Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Sna
7.8HIGH
CVE-2019-10497
all versions
Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the pr
7.8HIGH
CVE-2019-10489
all versions
Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5HIGH
CVE-2019-2346
all versions
Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdr
7.8HIGH
CVE-2019-2345
all versions
Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna
7.0HIGH
CVE-2019-2343
all versions
Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent fr
5.5MEDIUM
CVE-2019-2334
all versions
Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snap
7.5HIGH
CVE-2019-2330
all versions
improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snapdragon Comp
5.5MEDIUM
CVE-2019-2328
all versions
Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon
7.8HIGH
CVE-2019-2327
all versions
Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdrago
9.8CRITICAL
CVE-2019-2326
all versions
Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdra
7.8HIGH
CVE-2019-2322
all versions
Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
9.8CRITICAL
CVE-2019-2316
all versions
When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrago
8.8HIGH
CVE-2019-2314
all versions
Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon C
7.0HIGH
CVE-2019-2312
all versions
When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received
7.8HIGH
CVE-2019-2309
all versions
While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real dat
9.8CRITICAL
CVE-2019-2308
all versions
User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the
7.8HIGH
CVE-2019-2307
all versions
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Sn
9.8CRITICAL
CVE-2019-2306
all versions
Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Conne
7.8HIGH
CVE-2019-2305
all versions
Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdrag
9.8CRITICAL
CVE-2019-2301
all versions
Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdrago
7.8HIGH
CVE-2019-2299
all versions
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Sna
7.8HIGH
CVE-2019-2298
all versions
Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon C
7.8HIGH
CVE-2019-2293
all versions
Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapd
7.8HIGH
CVE-2019-2290
all versions
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto,
7.8HIGH
CVE-2019-2281
all versions
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Comp
7.8HIGH
CVE-2019-2278
all versions
User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon
7.8HIGH
CVE-2019-2276
all versions
Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user cont
9.8CRITICAL
CVE-2019-2273
all versions
IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon
7.5HIGH
CVE-2019-2272
all versions
Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snap
7.8HIGH
CVE-2019-2263
all versions
Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connec
7.8HIGH
CVE-2019-2254
all versions
Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdra
9.8CRITICAL
CVE-2019-2253
all versions
Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity,
9.8CRITICAL
CVE-2019-2241
all versions
While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done
5.5MEDIUM
CVE-2019-2240
all versions
While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behav
5.5MEDIUM
CVE-2019-2239
all versions
Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdrag
5.5MEDIUM
CVE-2019-2235
all versions
Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdrago
7.8HIGH
CVE-2019-2292
all versions
Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Sn
7.8HIGH
CVE-2019-2287
all versions
Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto,
9.8CRITICAL
CVE-2019-2279
all versions
Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Co
9.8CRITICAL
CVE-2019-2277
all versions
Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Comput
7.8HIGH
CVE-2019-2269
all versions
Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snap
9.8CRITICAL
CVE-2019-2264
all versions
Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapd
7.8HIGH
CVE-2019-2261
all versions
Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdrag
5.5MEDIUM
CVE-2019-2260
all versions
A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Co
7.0HIGH
CVE-2019-2243
all versions
Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdr
5.5MEDIUM
CVE-2018-13927
all versions
Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image load
7.8HIGH
CVE-2018-13924
all versions
Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compu
9.8CRITICAL
CVE-2018-13896
all versions
XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lo
7.8HIGH
CVE-2019-2259
all versions
Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdrago
9.8CRITICAL
CVE-2019-2256
all versions
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto,
9.8CRITICAL
CVE-2019-2255
all versions
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto,
9.8CRITICAL
CVE-2018-5913
all versions
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdrago
7.8HIGH
CVE-2018-13919
all versions
Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to re
7.8HIGH
CVE-2018-13911
all versions
Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, S
9.8CRITICAL
CVE-2018-13909
all versions
Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unex
7.0HIGH
CVE-2018-13908
all versions
Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snap
7.8HIGH
CVE-2018-13907
all versions
While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key o
5.3MEDIUM
CVE-2018-13906
all versions
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged applicat
9.1CRITICAL
CVE-2018-13902
all versions
Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA fi
7.5HIGH
CVE-2018-13901
all versions
Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdrago
5.5MEDIUM
CVE-2018-13898
all versions
Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electro
9.8CRITICAL
CVE-2018-11955
all versions
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and resul
9.8CRITICAL
CVE-2018-11947
all versions
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consu
5.5MEDIUM
CVE-2018-11942
all versions
Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel S
5.5MEDIUM
CVE-2018-11934
all versions
Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdrago
7.8HIGH
CVE-2018-11929
all versions
Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra
7.8HIGH
CVE-2017-8252
all versions
Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, S
5.5MEDIUM
CVE-2019-2250
all versions
Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Cons
7.8HIGH
CVE-2019-2248
all versions
Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, S
7.8HIGH
CVE-2019-2247
all versions
Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while usin
7.8HIGH
CVE-2019-2245
all versions
Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later u
9.8CRITICAL
CVE-2019-2244
all versions
Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later
9.8CRITICAL
CVE-2018-13925
all versions
Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference cau
9.8CRITICAL
CVE-2018-13920
all versions
Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, S
7.8HIGH
CVE-2018-13899
all versions
Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
7.8HIGH
CVE-2018-13895
all versions
Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileg
7.8HIGH
CVE-2018-13887
all versions
Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
9.8CRITICAL
CVE-2018-13886
all versions
Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8CRITICAL
CVE-2018-13885
all versions
Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,
5.5MEDIUM
CVE-2018-12013
all versions
Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Comput
7.8HIGH
CVE-2018-12012
all versions
While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-u
7.8HIGH
CVE-2018-12005
all versions
An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I
5.5MEDIUM
CVE-2018-12004
all versions
Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics
5.5MEDIUM
CVE-2018-11976
all versions
ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon C
5.5MEDIUM
CVE-2018-11968
all versions
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity
7.8HIGH
CVE-2018-11967
all versions
Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the
7.8HIGH
CVE-2018-11949
all versions
Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute
9.8CRITICAL
CVE-2018-11940
all versions
Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdr
9.8CRITICAL
CVE-2018-11937
all versions
Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Sn
9.8CRITICAL
CVE-2018-11930
all versions
Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential
9.8CRITICAL
CVE-2018-11928
all versions
Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute,
7.8HIGH
CVE-2018-11927
all versions
Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find ev
7.8HIGH
CVE-2018-11925
all versions
Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdrago
7.8HIGH
CVE-2018-11924
all versions
Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Co
7.8HIGH
CVE-2018-11923
all versions
Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdr
7.8HIGH
CVE-2018-11271
all versions
Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdrag
9.8CRITICAL
CVE-2017-18278
all versions
An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than th
7.8HIGH
CVE-2017-18276
all versions
Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snap
7.8HIGH
CVE-2018-13918
all versions
kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and s
7.8HIGH
CVE-2018-11971
all versions
Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage
5.5MEDIUM
CVE-2018-11970
all versions
TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C
7.8HIGH
CVE-2018-11966
all versions
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I
7.8HIGH
CVE-2018-5839
all versions
Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Co
7.1HIGH
CVE-2018-13913
all versions
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consume
7.8HIGH
CVE-2018-13912
all versions
Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snap
5.5MEDIUM
CVE-2018-13905
all versions
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdrago
7.8HIGH
CVE-2018-13900
all versions
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Sna
7.8HIGH
CVE-2018-11948
all versions
Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Sn
5.5MEDIUM
CVE-2018-11945
all versions
Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow
9.8CRITICAL
CVE-2018-11938
all versions
Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto,
7.8HIGH
CVE-2018-11935
all versions
Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto,
5.3MEDIUM
CVE-2018-11932
all versions
Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
9.1CRITICAL
CVE-2018-11864
all versions
Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdrago
5.5MEDIUM
CVE-2018-11845
all versions
Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto,
5.5MEDIUM
CVE-2018-11820
all versions
Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdrag
5.5MEDIUM
CVE-2018-11289
all versions
Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overf
7.8HIGH
CVE-2018-13888
all versions
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL
7.8HIGH
CVE-2018-11899
all versions
While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Conne
7.8HIGH
CVE-2018-5915
all versions
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versio
9.8CRITICAL
CVE-2018-5868
all versions
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM
7.8HIGH
CVE-2018-5867
all versions
Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wea
7.8HIGH
CVE-2018-3595
all versions
Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon au
5.5MEDIUM
CVE-2018-11999
all versions
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon we
5.5MEDIUM
CVE-2018-11288
all versions
Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the inte
7.8HIGH
CVE-2018-11279
all versions
Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon m
8.8HIGH
CVE-2017-18332
all versions
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdra
5.5MEDIUM
CVE-2017-18160
all versions
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and
9.8CRITICAL
CVE-2017-18329
all versions
Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625
7.8HIGH
CVE-2017-18327
all versions
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdra
5.5MEDIUM
CVE-2017-18323
all versions
Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in
5.5MEDIUM
CVE-2018-5918
all versions
Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdrag
7.8HIGH
CVE-2018-5917
all versions
Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in ve
7.8HIGH
CVE-2018-5916
all versions
Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdrag
6.5MEDIUM
CVE-2018-5912
all versions
Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon
7.8HIGH
CVE-2018-11994
all versions
SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdrago
7.8HIGH
CVE-2018-11921
all versions
Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and c
7.8HIGH
CVE-2017-18316
all versions
Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Sna
7.8HIGH
CVE-2018-11884
all versions
Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mo
7.8HIGH
CVE-2018-11882
all versions
Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD
7.8HIGH
CVE-2018-11880
all versions
Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 8
7.8HIGH
CVE-2018-11877
all versions
When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapd
7.8HIGH
CVE-2018-11876
all versions
Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD
7.8HIGH
CVE-2018-11875
all versions
Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 84
7.8HIGH
CVE-2018-11874
all versions
Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version
7.8HIGH
CVE-2018-11872
all versions
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version
7.8HIGH
CVE-2018-11871
all versions
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdr
7.8HIGH
CVE-2018-11870
all versions
Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy
7.8HIGH
CVE-2018-11866
all versions
Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in S
7.8HIGH
CVE-2018-11865
all versions
Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdrago
7.8HIGH
CVE-2018-11862
all versions
Buffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD
7.8HIGH
CVE-2018-11861
all versions
Buffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845,
7.8HIGH
CVE-2018-11859
all versions
Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850.
7.8HIGH
CVE-2018-11858
all versions
When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile i
7.8HIGH
CVE-2018-11857
all versions
Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845,
7.8HIGH
CVE-2018-11856
all versions
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version
7.8HIGH
CVE-2018-5866
all versions
While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in ve
7.8HIGH
CVE-2018-11951
all versions
Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobi
5.5MEDIUM
CVE-2018-11950
all versions
Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850
7.8HIGH
CVE-2018-11854
all versions
Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845
7.8HIGH
CVE-2018-11853
all versions
Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile,
7.8HIGH
CVE-2018-11850
all versions
Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile,
7.8HIGH
CVE-2018-11849
all versions
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automob
7.8HIGH
CVE-2018-11846
all versions
The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version
4.7MEDIUM
CVE-2018-11824
all versions
A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, M
7.8HIGH
CVE-2018-11822
all versions
A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SD
7.8HIGH
CVE-2018-11821
all versions
Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MD
7.8HIGH
CVE-2017-18309
all versions
A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in versio
7.1HIGH
CVE-2017-18124
all versions
During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snap
7.8HIGH
CVE-2017-18299
all versions
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mo
5.5MEDIUM
CVE-2017-18298
all versions
Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We
7.8HIGH
CVE-2017-18283
all versions
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD
6.5MEDIUM
CVE-2017-18171
all versions
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in
8.8HIGH
CVE-2017-18170
all versions
Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version
8.8HIGH
CVE-2018-5871
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205
6.5MEDIUM
CVE-2018-5837
all versions
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 2
7.5HIGH
CVE-2018-11291
all versions
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA
7.5HIGH
CVE-2018-11287
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425,
9.8CRITICAL
CVE-2018-11269
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8
7.8HIGH
CVE-2018-11268
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8
7.8HIGH
CVE-2018-11267
all versions
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212
7.8HIGH
CVE-2018-11259
all versions
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on
7.7HIGH
CVE-2018-11257
all versions
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices i
7.8HIGH
CVE-2016-10499
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10497
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10493
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2016-10492
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.1CRITICAL
CVE-2016-10491
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10490
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2016-10487
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2016-10482
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10474
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2016-10469
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5HIGH
CVE-2016-10466
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10462
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD
9.8CRITICAL
CVE-2016-10460
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 835, SD 845, and SD 850, vendor spec
9.8CRITICAL
CVE-2016-10455
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10448
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10445
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD
9.8CRITICAL
CVE-2016-10443
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
6.8MEDIUM
CVE-2016-10431
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2016-10427
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2016-10424
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2016-10422
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile,
9.8CRITICAL
CVE-2016-10421
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2016-10419
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD
9.8CRITICAL
CVE-2016-10414
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile,
9.8CRITICAL
CVE-2016-10410
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2015-9224
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
9.8CRITICAL
CVE-2015-9213
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2015-9211
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9210
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9209
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2015-9203
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9202
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9198
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9193
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5HIGH
CVE-2015-9192
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9188
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9187
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9186
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9185
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9182
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9180
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9178
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9177
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9176
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5HIGH
CVE-2015-9175
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9172
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9171
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9170
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9166
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5HIGH
CVE-2015-9163
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
7.5HIGH
CVE-2015-9161
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD
9.8CRITICAL
CVE-2015-9160
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9159
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9158
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9153
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9149
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9148
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9
9.8CRITICAL
CVE-2015-9146
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MD
9.8CRITICAL
CVE-2015-9145
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9144
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
9.8CRITICAL
CVE-2015-9138
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
9.8CRITICAL
CVE-2015-9137
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2015-9129
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2015-9126
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9635M,
9.8CRITICAL
CVE-2015-9123
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FS
7.5HIGH
CVE-2015-9119
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, M
7.5HIGH
CVE-2014-9993
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2014-9988
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2014-9987
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2014-10053
all versions
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon
9.8CRITICAL
CVE-2018-3593
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM920
9.8CRITICAL
CVE-2018-3592
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MD
9.8CRITICAL
CVE-2018-3589
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, the vswr
9.8CRITICAL
CVE-2017-18146
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM920
9.8CRITICAL
CVE-2017-18143
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are c
7.5HIGH
CVE-2017-18142
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while pr
9.8CRITICAL
CVE-2017-18139
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MD
9.8CRITICAL
CVE-2017-18138
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MD
9.8CRITICAL
CVE-2017-18135
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 83
9.8CRITICAL
CVE-2017-18134
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, a buffer overflow may potentially
9.8CRITICAL
CVE-2017-18128
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while conf
7.5HIGH
CVE-2017-18125
all versions
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD
7.5HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin