Advisories · Technology

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear.

Every CVE that names Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-5915 CVE record

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 2…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-5867 CVE record

Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-3595 CVE record

Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-11999 CVE record

Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996A…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-11288 CVE record

Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon automobile, snapdragon mobile and snapdrago…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-11279 CVE record

Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2017-8276 CVE record

Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2017-18332 CVE record

Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MD…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2017-18331 CVE record

Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 82…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2017-18330 CVE record

Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, M…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18327 CVE record

Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MD…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18323 CVE record

Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18141 CVE record

When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-11004 CVE record

A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2018-5918 CVE record

Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-5916 CVE record

Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-5877 CVE record

In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wea…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-11996 CVE record

When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-11994 CVE record

SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, M…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-11921 CVE record

Failure condition is not handled properly and the correct error code is not returned.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-11264 CVE record

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in ver…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2017-18316 CVE record

Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 28 Nov 2018
CVE-2018-11871 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: Buffer overwrite can happen in WLAN function while processing set pdev parameter command…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 29 Oct 2018
CVE-2018-11870 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: Buffer overwrite can occur when the legacy rates count received from the host is not…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 29 Oct 2018
CVE-2018-3588 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: There is improper access control of the SSC and GPU mapped regions which lead to inject…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-11850 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: Lack of check on remaining length parameter When processing scan start command will lead…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-11849 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: Lack of check on out of range of bssid parameter When processing scan start command will…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-11305 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: When a series of FDAL messages are sent to the modem…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2017-18311 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: XPU Master privilege escalation is possible due to improper access control of unused…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2017-18310 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2017-18303 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: While processing the sensors registry configuration file…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18299 CVE record

Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM899…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18298 CVE record

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18296 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: Access control on applications is not applied while accessing SafeSwitch services can…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18295 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: Possible buffer overflow if input is not null terminated in DSP Service module in…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18292 CVE record

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18277 CVE record

Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile…: When dynamic memory allocation fails…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2018-5871 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, S…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-5837 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, S…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11292 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 45…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11291 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA93…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11290 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11287 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, S…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11285 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11277 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11268 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-11267 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, S…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2017-18314 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 43…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2017-18280 CVE record

In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-5894 CVE record

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5882 CVE record

While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5878 CVE record

While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5876 CVE record

While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5875 CVE record

While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5874 CVE record

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5838 CVE record

Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-11259 CVE record

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased.
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-11258 CVE record

In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2016-10494 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9640, MDM9645, MDM9650, MDM9655, M…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10493 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655,…
- Qualcomm, Inc. Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018