Qualcomm

Sd 412 Firmware

240 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2017-18310

  • EPSS 0.04%
  • Veröffentlicht 26.10.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:49

ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52,...

7.8

CVE-2017-18311

  • EPSS 0.03%
  • Veröffentlicht 26.10.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:49

XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640,...

7.8

CVE-2017-18312

  • EPSS 0.03%
  • Veröffentlicht 23.10.2018 13:29:02
  • Zuletzt bearbeitet 21.11.2024 03:19:49

While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdragon Mobile in version MSM8996AU, SD 410/12, SD 617, S...

5.7

CVE-2017-18313

  • EPSS 0.07%
  • Veröffentlicht 23.10.2018 13:29:02
  • Zuletzt bearbeitet 21.11.2024 03:19:50

Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is located within the authenticated image in Snapdragon ...

5.5

CVE-2017-18292

  • EPSS 0.06%
  • Veröffentlicht 23.10.2018 13:29:01
  • Zuletzt bearbeitet 21.11.2024 03:19:47

Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD ...

7.8

CVE-2017-18298

  • EPSS 0.05%
  • Veröffentlicht 23.10.2018 13:29:01
  • Zuletzt bearbeitet 21.11.2024 03:19:48

Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/...

8.8

CVE-2017-18170

  • EPSS 0.07%
  • Veröffentlicht 23.10.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:28

Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, S...

8.8

CVE-2017-18171

  • EPSS 0.06%
  • Veröffentlicht 23.10.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:28

Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/1...

7.8

CVE-2017-18172

  • EPSS 0.03%
  • Veröffentlicht 23.10.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:28

In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/1...

7.7

CVE-2018-11259

  • EPSS 0.04%
  • Veröffentlicht 06.07.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:43:00

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access t...