Latest qualcomm sd 430 firmware Vulnerabilities

● CVE-2019-10528

Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9640 Firmware

Qualcomm Mdm9640

and 50 more

● CVE-2019-10542

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 52 more

● CVE-2019-10508

Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industri...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 46 more

● CVE-2019-10501

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 74 more

● CVE-2019-10498

Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapd...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 82 more

● CVE-2019-2331

Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industria...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 87 more

● CVE-2019-10491

ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago...

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

Qualcomm Ipq8064 Firmware

Qualcomm Ipq8064

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

and 89 more

● CVE-2019-10524

Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industr...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 77 more

● CVE-2019-2323

Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 77 more

● CVE-2019-2324

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Con...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 61 more

● CVE-2019-10533

Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Google Android

and 73 more

● CVE-2019-10534

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Google Android

and 73 more

● CVE-2019-2332

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, ...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

and 87 more

● CVE-2019-10515

DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 73 more

● CVE-2019-10522

While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrag...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Google Android

and 79 more

● CVE-2019-10495

Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri...

Google Android

Qualcomm Msm8996au

Qualcomm Qcs605 Firmware

Google Android

and 67 more

● CVE-2019-10488

Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 83 more

● CVE-2019-10512

Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapd...

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

Qualcomm Ipq8064 Firmware

Qualcomm Ipq8064

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

and 91 more

● CVE-2019-10504

Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mo...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Google Android

and 49 more

● CVE-2019-10496

Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...

Google Android

Qualcomm Msm8996au

Qualcomm Qcs605 Firmware

Google Android

and 67 more

● CVE-2019-2325

Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial ...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 83 more

● CVE-2019-2275

While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends on CVE-2018-13907) in Snapdragon Auto, Sn...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

and 81 more

● CVE-2019-2283

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 73 more

● CVE-2019-2285

Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C...

Google Android

Qualcomm Msm8996au

Qualcomm Qcs605 Firmware

Google Android

and 67 more

● CVE-2019-2258

Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon I...

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9615 Firmware

Google Android

and 95 more

● CVE-2019-2294

Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 89 more

● CVE-2019-10539

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdrag...

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 93 more

● CVE-2019-10489

Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mo...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Google Android

and 79 more

● CVE-2019-2252

Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Qualcomm Mdm9650 Firmware

Qualcomm Mdm9650

Google Android

Qualcomm Msm8996au

and 67 more

● CVE-2019-10492

Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD...

Google Android

Qualcomm Mdm9607

Google Android

Qualcomm Qualcomm 215

and 31 more

● CVE-2019-10509

Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr...

Google Android

Qualcomm Msm8996au

Google Android

Qualcomm Qca6574au

and 59 more

● CVE-2019-2343

Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver in Snapdragon Auto, Snapdragon Compute, Snapdragon ...

Google Android

Qualcomm Msm8996au

Qualcomm Qcs605 Firmware

Google Android

and 66 more

● CVE-2019-2345

Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM...

Google Android

Qualcomm Msm8996au

Qualcomm Qcs605 Firmware

Google Android

and 38 more

● CVE-2019-2298

Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 52 more

● CVE-2019-2316

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425,...

Qualcomm Mdm9640 Firmware

Qualcomm Mdm9640

Qualcomm Qcs405 Firmware

Google Android

Qualcomm Qcs605 Firmware

Google Android

and 37 more

● CVE-2019-2306

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 74 more

● CVE-2019-2299

An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn...

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

Qualcomm Ipq8064 Firmware

Qualcomm Ipq8064

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

and 74 more

● CVE-2019-2263

Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

Qualcomm Ipq8064 Firmware

Qualcomm Ipq8064

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

and 60 more

● CVE-2019-2273

IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...

Google Android

Qualcomm Qcs605 Firmware

Google Android

Qualcomm Qualcomm 215

and 54 more

● CVE-2019-2290

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9640 Firmware

Qualcomm Mdm9640

and 50 more

● CVE-2019-2272

Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdr...

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9650 Firmware

Qualcomm Mdm9650

and 50 more

● CVE-2019-2277

Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi...

Google Android

Qualcomm Msm8996au

Qualcomm Qcs405 Firmware

Google Android

Qualcomm Qcs605 Firmware

Google Android

and 50 more

● CVE-2019-2264

Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM960...

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9640 Firmware

Qualcomm Mdm9640

Google Android

and 46 more

● CVE-2019-2236

Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connecti...

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 71 more

● CVE-2019-2253

Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

and 81 more

● CVE-2019-2326

Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 77 more

● CVE-2019-2322

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

and 83 more

● CVE-2019-2235

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9650 Firmware

Qualcomm Mdm9650

and 65 more

● CVE-2019-2346

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap...

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

Qualcomm Qca8081 Firmware

Google Android

Qualcomm Qcs404 Firmware

Google Android

and 43 more

● CVE-2019-2239

Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

and 95 more

Latest qualcomm sd 430 firmware Vulnerabilities

Company

Resources

Contact