Sdx20 Firmware

CVEs (509)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-18304	Qualcomm Snapdragon Mobile	Hig	0.51	7.8	0.00	Oct 23, 2018	Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD…
CVE-2017-18303	Qualcomm Snapdragon Mobile	Hig	0.51	7.8	0.00	Oct 23, 2018	While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD…
CVE-2017-18296	Qualcomm Snapdragon Mobile	Hig	0.51	7.8	0.00	Oct 23, 2018	Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD…
CVE-2017-18295	Qualcomm Snapdragon Mobile	Hig	0.51	7.8	0.00	Oct 23, 2018	Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD…
CVE-2018-11285	Qualcomm Snapdragon	Hig	0.51	7.8	0.01	Sep 20, 2018	In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632,…
CVE-2018-11269	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Sep 20, 2018	In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660,…
CVE-2018-11268	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Sep 20, 2018	In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660,…
CVE-2018-11267	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Sep 20, 2018	In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD…
CVE-2018-5838	Qualcomm Mdm9650 Firmware	Hig	0.51	7.8	0.00	Jul 6, 2018	Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
CVE-2018-11258	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Jul 6, 2018	In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD…
CVE-2016-10451	Qualcomm Snapdragon Mobile	Hig	0.51	7.8	0.00	Apr 18, 2018	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD…
CVE-2018-11259	Qualcomm Snapdragon	Hig	0.50	7.7	0.00	Jul 6, 2018	Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the…
CVE-2022-33213	Qualcomm Modem	Hig	0.49	7.5	0.00	Mar 10, 2023	Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-40512	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Feb 12, 2023	Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33299	Qualcomm Bluetooth HOST	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
CVE-2022-33290	Qualcomm Bluetooth HOST	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
CVE-2022-33286	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33285	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33238	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25710	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVE-2017-18304HigOct 23, 2018
Qualcomm
Snapdragon Mobile
risk 0.51cvss 7.8epss 0.00
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD…
CVE-2017-18303HigOct 23, 2018
Qualcomm
Snapdragon Mobile
risk 0.51cvss 7.8epss 0.00
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD…
CVE-2017-18296HigOct 23, 2018
Qualcomm
Snapdragon Mobile
risk 0.51cvss 7.8epss 0.00
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD…
CVE-2017-18295HigOct 23, 2018
Qualcomm
Snapdragon Mobile
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD…
CVE-2018-11285HigSep 20, 2018
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.01
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632,…
CVE-2018-11269HigSep 20, 2018
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660,…
CVE-2018-11268HigSep 20, 2018
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660,…
CVE-2018-11267HigSep 20, 2018
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD…
CVE-2018-5838HigJul 6, 2018
Qualcomm
Mdm9650 Firmware
risk 0.51cvss 7.8epss 0.00
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
CVE-2018-11258HigJul 6, 2018
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD…
CVE-2016-10451HigApr 18, 2018
Qualcomm
Snapdragon Mobile
risk 0.51cvss 7.8epss 0.00
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD…
CVE-2018-11259HigJul 6, 2018
Qualcomm
Snapdragon
risk 0.50cvss 7.7epss 0.00
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the…
CVE-2022-33213HigMar 10, 2023
Qualcomm
Modem
risk 0.49cvss 7.5epss 0.00
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-40512HigFeb 12, 2023
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33299HigJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.49cvss 7.5epss 0.00
Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
CVE-2022-33290HigJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.49cvss 7.5epss 0.00
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
CVE-2022-33286HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
CVE-2022-33285HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33238HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25710HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Page 20 of 26