VYPR

Msm8996au Firmware

by Qualcomm

CVEs (678)

  • CVE-2019-2310HigDec 12, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2019-10485HigDec 12, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053,…

  • CVE-2019-2335HigNov 21, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables…

  • CVE-2019-10488HigNov 6, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2019-10489HigSep 30, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607,…

  • CVE-2019-2334HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,…

  • CVE-2018-13897HigJul 25, 2019
    Qualcomm
    dnsmasq
    risk 0.49cvss 7.5epss 0.01

    Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206,…

  • CVE-2018-13902HigJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2018-5837HigSep 20, 2018
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,…

  • CVE-2018-11291HigSep 20, 2018
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810,…

  • CVE-2018-11290HigSep 20, 2018
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820A, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20,…

  • CVE-2018-5892HigJul 6, 2018
    Qualcomm
    Snapdragon Mobile
    risk 0.49cvss 7.5epss 0.01

    The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.

  • CVE-2023-22382HigOct 3, 2023
    Qualcomm
    Automotive
    risk 0.48cvss 7.4epss 0.00

    Weak configuration in Automotive while VM is processing a listener request from TEE.

  • CVE-2022-40537HigMar 10, 2023
    Qualcomm
    Bluetooth HOST
    risk 0.47cvss 7.3epss 0.00

    Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

  • CVE-2022-40515HigMar 10, 2023
    Qualcomm
    video
    risk 0.47cvss 7.3epss 0.00

    Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

  • CVE-2022-25687HigOct 19, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2022-25688HigSep 16, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2022-25668HigSep 2, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2022-25659HigSep 2, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2022-22087HigJun 14, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.01

    memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Page 28 of 34