Qualcomm

Qcs404 Firmware

98 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2019-2346

  • EPSS 0.03%
  • Published 25.07.2019 17:15:14
  • Last modified 21.11.2024 04:40:45

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...

5.5

CVE-2019-2241

  • EPSS 0.05%
  • Published 25.07.2019 17:15:12
  • Last modified 21.11.2024 04:40:30

While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to unintended SUI behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...

5.5

CVE-2019-2240

  • EPSS 0.05%
  • Published 25.07.2019 17:15:12
  • Last modified 21.11.2024 04:40:30

While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snap...

5.5

CVE-2019-2239

  • EPSS 0.04%
  • Published 25.07.2019 17:15:12
  • Last modified 21.11.2024 04:40:30

Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon I...

7.8

CVE-2019-2235

  • EPSS 0.05%
  • Published 25.07.2019 17:15:11
  • Last modified 21.11.2024 04:40:29

Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer I...

7.8

CVE-2018-13896

  • EPSS 0.04%
  • Published 22.07.2019 14:15:11
  • Last modified 21.11.2024 03:48:16

XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage.. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C...

7.8

CVE-2018-13927

  • EPSS 0.03%
  • Published 22.07.2019 14:15:11
  • Last modified 21.11.2024 03:48:21

Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapd...

10

CVE-2018-13924

  • EPSS 0.36%
  • Published 22.07.2019 14:15:11
  • Last modified 21.11.2024 03:48:20

Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn...