Latest qualcomm sm6150 Vulnerabilities

● CVE-2023-21666

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Qualcomm Wcn685x-5 Firmware

Qualcomm Wcn685x-5

and 325 more

● CVE-2022-33273

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

Google Android

Qualcomm Ar8035

Google Android

and 193 more

● CVE-2023-21665

Incorrect Type Conversion or Cast in Graphics

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

Google Android

Qualcomm Apq8017

and 875 more

● CVE-2022-40504

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Apq8017

Google Android

and 373 more

● CVE-2022-33298

Use after free in Modem

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

and 302 more

● CVE-2022-33296

Integer overflow to buffer overflow in Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Apq8017

Google Android

and 450 more

● CVE-2022-33288

Buffer copy without checking the size of input in Core

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Ar8035

and 507 more

● CVE-2022-40503

Buffer over-read in Bluetooth Host.

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 735 more

● CVE-2022-40532

Integer overflow or wraparound in WLAN

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm Apq8016 Firmware

Google Android

and 1407 more

● CVE-2022-33302

Improper validation of array index in User Identity Module

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

and 895 more

● CVE-2022-33269

Integer overflow or wraparound in Core

Google Android

Qualcomm Ar8035

Google Android

and 399 more

● CVE-2022-33289

Improper validation of array index in Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

and 899 more

● CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Conne...

Qualcomm Apq8097 Firmware

Qualcomm Apq8097

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Ipq6000

and 152 more

● CVE-2020-3693

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 28 more

● CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the sta...

Google Android

Qualcomm Apq8009

Google Android

and 225 more

● CVE-2020-11127

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snap...

Google Android

Qualcomm Qcs405 Firmware

and 101 more

● CVE-2020-3654

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 77 more

● CVE-2020-11125

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

and 91 more

● CVE-2020-11164

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 55 more

● CVE-2020-3638

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 27 more

● CVE-2020-3673

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdrago...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 75 more

● CVE-2020-3684

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Sna...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

and 85 more

● CVE-2020-11162

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

and 75 more

● CVE-2020-11174

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 97 more

● CVE-2020-3704

u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This CVE is equivalent to I...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 87 more

● CVE-2020-11173

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 61 more

● CVE-2020-3670

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, S...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 101 more

● CVE-2020-3690

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 53 more

● CVE-2020-3703

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow ...

Google Android

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

Google Android

and 77 more

● CVE-2020-3692

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Comput...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Nicobar

and 29 more

● CVE-2020-3679

Google Android

Qualcomm Nicobar

and 28 more

● CVE-2020-3646

u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

Google Android

Qualcomm Qcm2150 Firmware

Google Android

and 26 more

● CVE-2019-10596

u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I...

Google Android

Qualcomm Nicobar

Qualcomm Qcs605 Firmware

Google Android

and 33 more

● CVE-2019-10629

u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivi...

Google Android

Qualcomm Ipq6018

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

and 57 more

● CVE-2020-3621

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snap...

Google Android

Qualcomm Apq8009

Google Android

and 121 more

● CVE-2019-13994

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential in...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-11124

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd...

Google Android

Qualcomm Mdm9607

Google Android

Qualcomm Nicobar

Qualcomm Qcs404 Firmware

Google Android

and 29 more

● CVE-2020-3629

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP attributes' in Snapdragon Auto, Snapdragon Compute, ...

Google Android

Qualcomm Rennell Firmware

Google Android

and 15 more

● CVE-2019-14117

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault except...

Google Android

Qualcomm Mdm9607

Qualcomm Qcs405 Firmware

and 17 more

● CVE-2019-10628

u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in Kernel from user library' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Google Android

Qualcomm Apq8098

Google Android

and 67 more

● CVE-2020-3617

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdrago...

Google Android

Qualcomm Nicobar

Qualcomm Qcs605 Firmware

Google Android

and 27 more

● CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the ...

Google Android

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

Qualcomm Ipq8064 Firmware

Qualcomm Ipq8064

and 175 more

● CVE-2019-13992

u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume...

Google Android

Qualcomm Ipq6018

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

and 57 more

● CVE-2020-11135

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, ...

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Msm8917 Firmware

Qualcomm Msm8917

and 49 more

● CVE-2019-14074

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 135 more

● CVE-2020-3622

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon A...

Qualcomm Apq8009

Qualcomm Apq8017

Google Android

Qualcomm Apq8098

Google Android

and 190 more

● CVE-2019-10527

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapd...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 133 more

● CVE-2019-13995

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-3656

Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Mdm9607

and 51 more

● CVE-2019-13999

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 123 more

Latest qualcomm sm6150 Vulnerabilities

Company

Resources

Contact