Latest qualcomm msm8909 Vulnerabilities

● CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the sta...

Google Android

Qualcomm Apq8009

Google Android

and 225 more

● CVE-2020-3621

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snap...

Google Android

Qualcomm Apq8009

Google Android

and 121 more

● CVE-2019-13994

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential in...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2019-14074

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 135 more

● CVE-2020-3622

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon A...

Qualcomm Apq8009

Qualcomm Apq8017

Google Android

Qualcomm Apq8098

Google Android

and 190 more

● CVE-2019-10527

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapd...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 133 more

● CVE-2019-13995

u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2019-13999

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 123 more

● CVE-2020-3624

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 117 more

● CVE-2019-14065

u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

Google Android

and 69 more

● CVE-2019-14052

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 97 more

● CVE-2019-10615

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 109 more

● CVE-2020-3619

u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 83 more

● CVE-2020-3643

u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 111 more

● CVE-2019-13998

u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 125 more

● CVE-2020-3644

u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

and 79 more

● CVE-2019-14101

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...

Google Android

Qualcomm Apq8009

Qualcomm Apq8096 Firmware

Google Android

and 108 more

● CVE-2019-14094

Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons...

Google Android

Qualcomm Apq8009

Google Android

and 122 more

● CVE-2020-3614

Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 105 more

● CVE-2019-14062

Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 109 more

● CVE-2019-14073

Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard feedback messages in Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 107 more

● CVE-2019-14080

Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, ...

Google Android

and 75 more

● CVE-2019-14067

Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 103 more

● CVE-2019-14077

Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Ipq6018

and 67 more

● CVE-2019-14078

Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Msm8909

and 15 more

● CVE-2019-10574

Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

Qualcomm Apq8017

and 96 more

● CVE-2018-21054

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exynos3470/5420, N(7.0) except MSM8939, N(7....

Google Android=6.0

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

and 15 more

● CVE-2019-10610

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 105 more

● CVE-2019-14012

Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon ...

Qualcomm Msm8905 Firmware

Qualcomm Msm8905

Google Android

Qualcomm Msm8909

Qualcomm Msm8917 Firmware

Qualcomm Msm8917

and 43 more

● CVE-2019-14011

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8096 Firmware

Google Android

and 103 more

● CVE-2019-14033

Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I...

Google Android

Qualcomm Apq8096 Firmware

Google Android

and 101 more

● CVE-2019-14021

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Sna...

Google Android

Qualcomm Apq8098

Google Android

and 85 more

● CVE-2019-10588

Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 103 more

● CVE-2019-10609

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 105 more

● CVE-2019-14020

Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_info/ guti_realloc_cmd in Snapdragon Auto, Snapdragon...

Google Android

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

Qualcomm Apq8096 Firmware

and 103 more

● CVE-2019-14019

Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact EPs bearer REq in Snapdragon Auto, Snapdrago...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

and 107 more

● CVE-2019-14007

Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute,...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 93 more

● CVE-2019-10483

Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

Qualcomm Apq8017

and 99 more

● CVE-2019-10552

Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 105 more

● CVE-2019-10616

Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Con...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

and 19 more

● CVE-2019-10553

Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 103 more

● CVE-2019-10586

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 101 more

● CVE-2019-10577

Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 109 more

● CVE-2019-14095

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

and 125 more

● CVE-2019-10550

Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Google Android

Qualcomm Mdm9206 Firmware

Qualcomm Mdm9206

Google Android

Qualcomm Mdm9607

Qualcomm Mdm9640 Firmware

and 75 more

● CVE-2019-10549

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industria...

Google Android

Qualcomm Msm8905 Firmware

Qualcomm Msm8905

Google Android

Qualcomm Msm8909

Qualcomm Msm8917 Firmware

and 39 more

● CVE-2019-10554

Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in Snapdragon Auto, Snap...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 105 more

● CVE-2019-10587

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 101 more

● CVE-2019-10594

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 103 more

● CVE-2019-10593

Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 97 more

Latest qualcomm msm8909 Vulnerabilities

Company

Resources

Contact