Latest qualcomm sdm439 Vulnerabilities

● CVE-2023-33055

Buffer Copy Without Checking Size of Input in Audio

Google Android

Qualcomm Ar8035

Qualcomm Csra6620 Firmware

Google Android

and 299 more

● CVE-2023-33059

Buffer Copy Without Checking Size of Input in Audio

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

Google Android

Qualcomm Apq8017

and 513 more

● CVE-2023-28540

Improper Authentication in Data Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Ar8035

and 299 more

● CVE-2022-22076

information disclosure due to cryptographic issue in Core during RPMB read request.

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

and 691 more

● CVE-2023-21657

Improper Input Validation in Audio

Qualcomm Csra6620 Firmware

Google Android

Qualcomm Csra6640 Firmware

Google Android

Qualcomm Wcn3991

and 247 more

● CVE-2022-40521

Improper authorization in Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

and 479 more

● CVE-2022-33264

Stack-based buffer overflow in Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9207 Lte Modem Firmware

Qualcomm 9207 Lte Modem

Google Android

Qualcomm Apq8017

and 479 more

● CVE-2023-21665

Incorrect Type Conversion or Cast in Graphics

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

Google Android

and 435 more

● CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Apq8017

Google Android

and 373 more

● CVE-2023-21666

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Qualcomm Wcn685x-5 Firmware

Qualcomm Wcn685x-5

and 325 more

● CVE-2022-33296

Integer overflow to buffer overflow in Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Apq8017

Google Android

and 222 more

● CVE-2022-33302

Improper validation of array index in User Identity Module

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

and 445 more

● CVE-2022-40532

Integer overflow or wraparound in WLAN

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm Apq8016 Firmware

Google Android

and 701 more

● CVE-2022-33289

Improper validation of array index in Modem

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

and 447 more

● CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the sta...

Google Android

Qualcomm Apq8009

Google Android

and 225 more

● CVE-2020-11162

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

and 75 more

● CVE-2020-3673

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdrago...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 75 more

● CVE-2020-11157

u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer...

Google Android

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

Qualcomm Mdm9640 Firmware

Qualcomm Mdm9640

and 29 more

● CVE-2020-3670

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, S...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 101 more

● CVE-2020-3703

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow ...

Google Android

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

Google Android

and 77 more

● CVE-2020-3654

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 77 more

● CVE-2020-11125

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

and 91 more

● CVE-2020-11135

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, ...

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Msm8917 Firmware

Qualcomm Msm8917

and 49 more

● CVE-2019-14074

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 135 more

● CVE-2020-3622

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon A...

Qualcomm Apq8009

Qualcomm Apq8017

Google Android

Qualcomm Apq8098

Google Android

and 190 more

● CVE-2019-10527

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapd...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 133 more

● CVE-2019-13995

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-3656

Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Mdm9607

and 51 more

● CVE-2020-3621

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snap...

Google Android

Qualcomm Apq8009

Google Android

and 121 more

● CVE-2019-13994

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential in...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-3624

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 117 more

● CVE-2020-11115

u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Co...

Google Android

Qualcomm Apq8009

Google Android

and 91 more

● CVE-2020-11118

u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Cons...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 103 more

● CVE-2019-10615

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 109 more

● CVE-2020-3619

u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 83 more

● CVE-2019-14052

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 97 more

● CVE-2020-11120

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario...

Google Android

Qualcomm Apq8098

Google Android

and 39 more

● CVE-2020-11116

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connec...

Google Android

Qualcomm Apq8009

Google Android

and 93 more

● CVE-2020-3643

u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 111 more

● CVE-2019-13998

u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2019-13999

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 123 more

● CVE-2020-11128

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

and 75 more

● CVE-2019-14037

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdr...

Google Android

Qualcomm Apq8009

Google Android

and 56 more

● CVE-2019-14099

Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

and 50 more

● CVE-2019-14101

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...

Google Android

Qualcomm Apq8009

Qualcomm Apq8096 Firmware

Google Android

and 108 more

● CVE-2019-14093

Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 56 more

● CVE-2020-3698

Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Con...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 87 more

● CVE-2020-3700

Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execution privileges needed in Snapdragon Auto, Snapdrago...

Google Android

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

and 31 more

● CVE-2020-3699

Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 89 more

● CVE-2020-3688

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 91 more

Latest qualcomm sdm439 Vulnerabilities

Company

Resources

Contact