Qualcomm

3,001 results · Feed

• Unscored —
  CVE-2017-18274

  While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incor…

  Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
  May 6, 2019
• Unscored —
  CVE-2017-18173

  In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snap…

  Qualcomm Snapdragon Mobile
  May 6, 2019
• Unscored —
  CVE-2017-18157

  A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in …

  Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
  May 6, 2019
• Unscored —
  CVE-2017-18156

  While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdr…

  Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
  May 6, 2019
• Unscored —
  CVE-2017-15841

  When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in versio…

  Qualcomm Snapdragon Mobile
  May 6, 2019
• Unscored —
  CVE-2017-18131

  In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version M…

  Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
  May 6, 2019
• Unscored —
  CVE-2018-11966

  Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Apr 4, 2019
• Unscored —
  CVE-2018-11971

  Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure ass…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
  Apr 4, 2019
• Unscored —
  CVE-2018-11958

  Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon …

  Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructur
  Apr 4, 2019
• Unscored —
  CVE-2018-11830

  Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer …

  Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructur
  Apr 4, 2019
• Unscored —
  CVE-2018-11970

  TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer El…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
  Apr 4, 2019
• Unscored —
  CVE-2018-13918

  kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent oper…

  Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Apr 4, 2019
• Unscored —
  CVE-2018-11945

  Improper input validation in wireless service messaging module for data received from broadcast messages can lead to he…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
  Feb 25, 2019
• Unscored —
  CVE-2018-11864

  Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11948

  Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose conti…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11938

  Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapd…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11845

  Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdr…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11931

  Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11289

  Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a b…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11820

  Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues …

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11932

  Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snap…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-11935

  Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapd…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 25, 2019
• Unscored —
  CVE-2018-13913

  Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdra…

  Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 25, 2019
• Unscored —
  CVE-2018-13905

  KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto…

  Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 25, 2019
• Unscored —
  CVE-2018-13900

  Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdrago…

  Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 25, 2019
• Unscored —
  CVE-2018-13914

  Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, …

  Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 25, 2019
• Unscored —
  CVE-2018-13912

  Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connect…

  Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 25, 2019
• Unscored —
  CVE-2018-13904

  Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Sn…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
  Feb 25, 2019
• Unscored —
  CVE-2018-5839

  Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Sn…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 25, 2019
• Unscored —
  CVE-2018-11855

  If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmit…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 11, 2019
• Unscored —
  CVE-2018-11962

  In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-fr…

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers
  Feb 11, 2019
• Unscored —
  CVE-2018-11847

  Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used …

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 11, 2019
• Unscored —
  CVE-2018-11899

  While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapd…

  Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 11, 2019
• Unscored —
  CVE-2018-11888

  Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Feb 11, 2019
• Unscored —
  CVE-2018-13889

  In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory …

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers
  Feb 11, 2019
• Unscored —
  CVE-2018-13888

  There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array le…

  Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
  Feb 11, 2019
• Unscored —
  CVE-2018-13893

  In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound…

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers
  Feb 11, 2019
• Unscored —
  CVE-2018-12014

  In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer…

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers
  Feb 11, 2019
• Unscored —
  CVE-2018-12010

  In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of l…

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers
  Feb 11, 2019
• Unscored —
  CVE-2018-12006

  In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with n…

  Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers
  Feb 11, 2019