Advisories · Technology

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear.

Every CVE that names Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-5881 CVE record

Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-5880 CVE record

Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 42…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-5879 CVE record

Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, S…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-5869 CVE record

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12,…
- Qualcomm, Inc. Snapdragon Mobile,Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-11998 CVE record

While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 2…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2018-11284 CVE record

Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and snapdragon wear in versio…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2017-18160 CVE record

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Jan 2019
CVE-2017-18329 CVE record

Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU,…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18328 CVE record

Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 42…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18326 CVE record

Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/S…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18324 CVE record

Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18322 CVE record

Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2017-18319 CVE record

Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 3 Jan 2019
CVE-2016-10502 CVE record

While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM965…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 10 Dec 2018
CVE-2018-11866 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Integer overflow may happen in WLAN when calculating an internal structure size due to…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 29 Oct 2018
CVE-2018-11865 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Integer overflow may happen when calculating an internal structure size due to lack of…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 29 Oct 2018
CVE-2018-5914 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Improper input validation in TZ led to array out of bound in TZ function while accessing…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-5866 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: While processing logs, data is copied into a buffer pointed to by an untrusted pointer in…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-11853 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Lack of check on out of range for channels When processing channel list set command will…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-11824 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2018-11821 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Possible integer overflow may happen in WLAN during memory allocation in Snapdragon…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2017-18308 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Modem segments are unlocked after authentication…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 26 Oct 2018
CVE-2017-18313 CVE record

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is lo…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18305 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18300 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Secure display content could be accessed by third party trusted application after…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18293 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: When a particular GPIO is protected by blocking access to the corresponding GPIO resource…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2017-18282 CVE record

Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear: Non-secure SW can cause SDCC to generate secure bus accesses…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 23 Oct 2018
CVE-2018-11982 CVE record

In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 20 Sept 2018
CVE-2018-5892 CVE record

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5891 CVE record

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available.
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5885 CVE record

While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear.
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2018-5884 CVE record

Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents.
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2017-11088 CVE record

Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 6 Jul 2018
CVE-2016-10499 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10497 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10492 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10491 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 21…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10485 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10482 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 21…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10481 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10480 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10476 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10473 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10472 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10466 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 21…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10464 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574AU, QCA9377, SD 210/SD 212/SD 205,…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10459 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 400, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10457 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10456 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, S…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10455 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10451 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10449 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, S…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10448 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10447 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 6…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10441 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 4…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10427 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10421 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM890…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10420 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 4…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10416 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018
CVE-2016-10415 CVE record

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, S…
- Qualcomm, Inc. Snapdragon Mobile, Snapdragon Wear
Not analysed yet 18 Apr 2018