Qualcomm

Sd 410 Firmware

245 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2018-11264

  • EPSS 0.04%
  • Published 28.11.2018 15:29:00
  • Last modified 21.11.2024 03:43:01

Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/...

7.8

CVE-2018-11921

  • EPSS 0.04%
  • Published 28.11.2018 15:29:00
  • Last modified 21.11.2024 03:44:15

Failure condition is not handled properly and the correct error code is not returned. It could cause unintended SUI behavior and create unintended SUI display in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM960...

6.5

CVE-2018-5916

  • EPSS 0.14%
  • Published 28.11.2018 15:29:00
  • Last modified 21.11.2024 04:09:41

Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM96...

7.8

CVE-2018-5918

  • EPSS 0.13%
  • Published 28.11.2018 15:29:00
  • Last modified 21.11.2024 04:09:42

Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/1...

7.8

CVE-2017-18124

  • EPSS 0.03%
  • Published 26.10.2018 13:29:00
  • Last modified 21.11.2024 03:19:23

During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM96...

7.8

CVE-2017-18310

  • EPSS 0.04%
  • Published 26.10.2018 13:29:00
  • Last modified 21.11.2024 03:19:49

ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52,...

7.8

CVE-2017-18311

  • EPSS 0.03%
  • Published 26.10.2018 13:29:00
  • Last modified 21.11.2024 03:19:49

XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640,...

7.8

CVE-2017-18312

  • EPSS 0.03%
  • Published 23.10.2018 13:29:02
  • Last modified 21.11.2024 03:19:49

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdragon Mobile in version MSM8996AU, SD 410/12, SD 617, S...

5.7

CVE-2017-18313

  • EPSS 0.07%
  • Published 23.10.2018 13:29:02
  • Last modified 21.11.2024 03:19:50

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is located within the authenticated image in Snapdragon ...

5.5

CVE-2017-18292

  • EPSS 0.06%
  • Published 23.10.2018 13:29:01
  • Last modified 21.11.2024 03:19:47

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD ...