Latest qualcomm sdm636 Vulnerabilities

● CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the sta...

Google Android

Qualcomm Apq8009

Google Android

and 225 more

● CVE-2020-3673

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdrago...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 75 more

● CVE-2020-3684

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Sna...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

and 85 more

● CVE-2020-3670

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, S...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 101 more

● CVE-2020-3703

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow ...

Google Android

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

Google Android

and 77 more

● CVE-2020-3654

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 77 more

● CVE-2020-11164

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 55 more

● CVE-2020-3657

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdr...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 69 more

● CVE-2020-11174

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 97 more

● CVE-2019-10628

u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in Kernel from user library' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Google Android

Qualcomm Apq8098

Google Android

and 67 more

● CVE-2020-11133

Google Android

Qualcomm MSM8998

Qualcomm Qcs605 Firmware

Google Android

Qualcomm Sda845 Firmware

Qualcomm Sda845

and 17 more

● CVE-2020-3617

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdrago...

Google Android

Qualcomm Nicobar

Qualcomm Qcs605 Firmware

Google Android

and 27 more

● CVE-2020-3621

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snap...

Google Android

Qualcomm Apq8009

Google Android

and 121 more

● CVE-2019-13994

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential in...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2019-14074

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 135 more

● CVE-2020-3622

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon A...

Qualcomm Apq8009

Qualcomm Apq8017

Google Android

Qualcomm Apq8098

Google Android

and 190 more

● CVE-2019-10527

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapd...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 133 more

● CVE-2019-13995

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-11135

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, ...

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Msm8917 Firmware

Qualcomm Msm8917

and 49 more

● CVE-2020-11118

u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Cons...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 103 more

● CVE-2019-10615

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 109 more

● CVE-2020-3669

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connec...

Google Android

Qualcomm Apq8098

Qualcomm Ipq5018 Firmware

Qualcomm Ipq5018

Google Android

Qualcomm Ipq6018

and 55 more

● CVE-2020-3619

u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 83 more

● CVE-2019-13999

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 123 more

● CVE-2019-10562

u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loaded into secure memory and leads to memory corruption' in Snap...

Google Android

Qualcomm Ipq6018

Google Android

Qualcomm MSM8998

and 51 more

● CVE-2019-14052

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 97 more

● CVE-2020-11116

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connec...

Google Android

Qualcomm Apq8009

Google Android

and 93 more

● CVE-2020-3666

u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrago...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 87 more

● CVE-2019-14056

u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn...

Google Android

and 53 more

● CVE-2020-3643

u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 111 more

● CVE-2019-13998

u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-3644

u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

and 79 more

● CVE-2020-3667

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum...

Google Android

Qualcomm Apq8098

Qualcomm Ipq5018 Firmware

Qualcomm Ipq5018

Google Android

Qualcomm Ipq6018

and 55 more

● CVE-2020-3624

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 117 more

● CVE-2019-14065

u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

Google Android

and 69 more

● CVE-2020-3611

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S...

Google Android

Qualcomm Apq8098

Google Android

Qualcomm MSM8998

and 25 more

● CVE-2019-14101

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...

Google Android

Qualcomm Apq8009

Qualcomm Apq8096 Firmware

Google Android

and 108 more

● CVE-2019-14093

Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 56 more

● CVE-2019-14037

Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdr...

Google Android

Qualcomm Apq8009

Google Android

and 56 more

● CVE-2020-3688

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 91 more

● CVE-2020-3698

Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Con...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 87 more

● CVE-2020-3699

Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 89 more

● CVE-2019-14094

Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Google Android

Qualcomm Apq8009

Google Android

and 122 more

● CVE-2019-14043

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag...

Google Android

and 54 more

● CVE-2020-3663

Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 83 more

● CVE-2020-3660

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 69 more

● CVE-2020-3665

A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne...

Google Android

Qualcomm Apq8009

Google Android

and 37 more

● CVE-2020-3658

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 83 more

● CVE-2020-3614

Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 105 more

● CVE-2019-14062

Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 109 more

Latest qualcomm sdm636 Vulnerabilities

Company

Resources

Contact