Latest qualcomm sd 650 Vulnerabilities

● CVE-2019-10508
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industri...
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
and 46 more
● CVE-2019-10504
Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mo...
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Msm8909w Firmware
and 49 more
● CVE-2019-10505
Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Cons...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 83 more
● CVE-2019-2275
While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends on CVE-2018-13907) in Snapdragon Auto, Sn...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9205 Firmware
Qualcomm Mdm9205
Qualcomm Mdm9206 Firmware
and 81 more
● CVE-2019-2258
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon I...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9615 Firmware
and 95 more
● CVE-2019-2294
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...
Google Android
Qualcomm Mdm9205 Firmware
Qualcomm Mdm9205
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 89 more
● CVE-2019-2290
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri...
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9640 Firmware
Qualcomm Mdm9640
and 50 more
● CVE-2019-2273
IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...
Qualcomm Msm8909w Firmware
Qualcomm Msm8909w
Qualcomm Qcs605 Firmware
Qualcomm Qcs605
Google Android
Qualcomm Qualcomm 215
and 54 more
● CVE-2019-2263
Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...
Qualcomm Ipq4019 Firmware
Qualcomm Ipq4019
Qualcomm Ipq8064 Firmware
Qualcomm Ipq8064
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
and 60 more
● CVE-2019-2272
Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdr...
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
Qualcomm Mdm9650
and 50 more
● CVE-2018-13897
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus...
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9640 Firmware
Qualcomm Mdm9640
and 52 more
● CVE-2019-2236
Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connecti...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 71 more
● CVE-2019-2239
Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 95 more
● CVE-2019-2254
Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrago...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 97 more
● CVE-2018-5903
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9640 Firmware
Qualcomm Mdm9640
and 54 more
● CVE-2018-11939
Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM...
Google Android
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Google Android
Qualcomm Mdm9607
and 30 more
● CVE-2019-2261
Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 79 more
● CVE-2018-13924
Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer ...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 107 more
● CVE-2019-2248
Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S...
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
and 60 more
● CVE-2019-2247
Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon C...
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
and 70 more
● CVE-2018-13906
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect...
Google Android
Qualcomm Ipq4019 Firmware
Qualcomm Ipq4019
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
and 99 more
● CVE-2018-11955
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electr...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 91 more
● CVE-2018-5913
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Co...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 97 more
● CVE-2018-13908
Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 89 more
● CVE-2018-13910
Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 45 more
● CVE-2018-13901
Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
and 55 more
● CVE-2018-13911
Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sna...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 87 more
● CVE-2018-13907
While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snapdragon Auto, Snapdragon Compute, Snapdrag...
Google Android
Qualcomm Pq4019 Firmware
Qualcomm Pq4019
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
and 99 more
● CVE-2018-13902
Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 87 more
● CVE-2018-11976
ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon ...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 87 more
● CVE-2018-11967
Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdragon...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 67 more
● CVE-2019-2244
Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute...
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
and 77 more
● CVE-2018-11271
Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag...
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Google Android
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
Qualcomm Mdm9650
and 79 more
● CVE-2018-13895
Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdragon Auto, Snapdragon Compute, Snapdragon ...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 69 more
● CVE-2018-11953
While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consu...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 55 more
● CVE-2018-13925
Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute,...
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
and 79 more
● CVE-2018-11958
Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap...
Google Android
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
and 55 more
● CVE-2018-11966
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 79 more
● CVE-2017-8252
Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electr...
Qualcomm Ipq4019 Firmware
Qualcomm Ipq4019
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Google Android
Google Android
and 105 more
● CVE-2018-13913
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, S...
Qualcomm Snapdragon Auto Firmware
Google Android
Google Android
Qualcomm Snapdragon Consumer Internet Of Things
Qualcomm Snapdragon Industrial Internet Of Things Firmware
Qualcomm Snapdragon Industrial Internet Of Things
and 76 more
● CVE-2018-11899
While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9640 Firmware
Qualcomm Mdm9640
and 64 more
● CVE-2018-11938
Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 85 more
● CVE-2018-11945
Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electroni...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 95 more
● CVE-2018-11845
Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 75 more
● CVE-2018-11289
Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 79 more
● CVE-2018-11864
Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdrag...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 79 more
● CVE-2018-11931
Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer ...
Google Android
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 75 more
● CVE-2018-11820
Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9150 Firmware
Qualcomm Mdm9150
Qualcomm Mdm9206 Firmware
and 87 more
● CVE-2018-11888
Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni...
Google Android
Qualcomm Mdm9607 Firmware
Qualcomm Mdm9607
Qualcomm Mdm9650 Firmware
Qualcomm Mdm9650
Qualcomm Mdm9655 Firmware
and 53 more
● CVE-2018-11847
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapd...
Google Android
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Qualcomm Mdm9607 Firmware
and 61 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203