Qualcomm Inc Snapdragon Mobile vulnerabilities

CVE-2018-11875 [HIGH] CWE-119 CVE-2018-11875: Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snap Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850.

CVE-2018-11874 [HIGH] CWE-119 CVE-2018-11874: Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

CVE-2018-11859 [HIGH] CWE-119 CVE-2018-11859: Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobi Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850.

CVE-2018-11879 [HIGH] CWE-190 CVE-2018-11879: When the buffer length passed is very large, bounds check could be bypassed leading to potential buf When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845

CVE-2018-11877 [HIGH] CWE-119 CVE-2018-11877: When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to poten When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

CVE-2018-11873 [HIGH] CWE-20 CVE-2018-11873: Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buff Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845.

CVE-2018-11857 [HIGH] CWE-119 CVE-2018-11857: Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mob Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850

CVE-2016-10406 [HIGH] CWE-200 CVE-2016-10406: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 835, while printing debug message of a pointer in wlan_qmi_err_cb, the real kernel address will be printed regardless of the kptr

CVE-2015-9134 [HIGH] CWE-476 CVE-2015-9134: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12 In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qsee_macc_gen_ecc_privkey', untrusted pointer dereference occurs, which could result in arbitrary write.

CVE-2014-9972 [CRITICAL] CWE-476 CVE-2014-9972: In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts ca In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an out-of-memory condition.

CVE-2014-10044 [HIGH] CWE-129 CVE-2014-10044: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 617, SD 800, and SD 820, in the time daemon, unauthorized users can potentially modify system time and cause an array index to be out-of-bound.

CVE-2022-25673 [HIGH] CWE-617 CVE-2022-25673: Denial of service in MODEM due to reachable assertion while processing configuration from network in Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile

CVE-2018-11882 [HIGH] CWE-119 CVE-2018-11882: Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

CVE-2018-11880 [HIGH] CWE-119 CVE-2018-11880: Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile i Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

CVE-2018-5870 [HIGH] CWE-119 CVE-2018-5870: While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in ve While loading a service image, an untrusted pointer dereference can occur in Snapdragon Mobile in versions SD 835, SDA660, SDX24.

CVE-2018-11822 [HIGH] CWE-190 CVE-2018-11822: A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in vers A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660

CVE-2020-3623 [HIGH] CWE-20 CVE-2020-3623: kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile i kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130

CVE-2018-11950 [HIGH] CWE-20 CVE-2018-11950: Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850

CVE-2016-10411 [HIGH] CWE-399 CVE-2016-10411: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 835, RTP daemon crashes and terminates VT call when UE receives RTCP unknown APP packet report which caused the parser to

CVE-2014-10063 [HIGH] CWE-254 CVE-2014-10063: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 a In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625 and SD 800, a fuse is not correctly blown on a secure device.