Page 21 of 436 results (0.006 seconds)

CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2018-11828

https://notcve.org/view.php?id=CVE-2018-11828

26 Oct 2018 — When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52 Cuando el firmware intenta obtener direcciones mac aleatorias generadas desde nuevo software, las lecturas de valores RNG y ADC son constantes, pero DUT se queda atrapado en un bucle al intentar obtener muestras ADC aleatorias en Snapdragon Mobile en... • http://www.securityfocus.com/bid/107681 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 7.8EPSS: 0%CPEs: 72EXPL: 0

CVE-2017-18124

https://notcve.org/view.php?id=CVE-2017-18124

26 Oct 2018 — During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20 Durante el arranque seguro, se realiza una suma en uint... • https://www.qualcomm.com/company/product-security/bulletins • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0

CVE-2018-3588

https://notcve.org/view.php?id=CVE-2018-3588

26 Oct 2018 — There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660. Hay un control de acceso incorrecto de las regiones mapeadas SSC y GPU, lo que conduce a la inyección de código del HLOS en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD ... • https://www.qualcomm.com/company/product-security/bulletins •

CVSS: 7.8EPSS: 0%CPEs: 62EXPL: 0

CVE-2017-18310

https://notcve.org/view.php?id=CVE-2017-18310

26 Oct 2018 — ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016 ClientEnv expone los servicios 0-32 al HLOS en Snapdragon Automobile, Snapdragon Mobile y Snapdragon Wear en versiones MSM8909W, MSM8996AU,... • http://www.securitytracker.com/id/1041432 •

CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0

CVE-2018-11824

https://notcve.org/view.php?id=CVE-2018-11824

26 Oct 2018 — A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660 Puede ocurrir un desbordamiento de búfer basado en pila en una rutina del firmware en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850 y SDA660. • https://www.qualcomm.com/company/product-security/bulletins • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 70EXPL: 0

CVE-2017-18311

https://notcve.org/view.php?id=CVE-2017-18311

26 Oct 2018 — XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_Hig... • https://www.qualcomm.com/company/product-security/bulletins •

CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0

CVE-2017-18308

https://notcve.org/view.php?id=CVE-2017-18308

26 Oct 2018 — Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430 Los segmentos del módem se desbloquean tras la autenticación, lo que los deja abiertos a todos en Snapdragon Mobile y Snapdragon Wear en versiones MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425 y SD 430. • http://www.securitytracker.com/id/1041432 •

CVSS: 7.8EPSS: 0%CPEs: 86EXPL: 0

CVE-2018-11849

https://notcve.org/view.php?id=CVE-2018-11849

26 Oct 2018 — Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632,... • http://www.securityfocus.com/bid/107681 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 28EXPL: 0

CVE-2018-5914

https://notcve.org/view.php?id=CVE-2018-5914

26 Oct 2018 — Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660. Validación de entradas incorrecta en TZ conduce a un array fuera de límites en la función TZ al acceder a los detalles del periférico mediante los datos entrantes en Snapdragon Mobile y Snapdragon Wear en versiones MDM9206... • https://www.qualcomm.com/company/product-security/bulletins • CWE-129: Improper Validation of Array Index •

CVSS: 7.8EPSS: 0%CPEs: 50EXPL: 0

CVE-2018-11305

https://notcve.org/view.php?id=CVE-2018-11305

26 Oct 2018 — When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20. Cuando se envía una serie de mensajes FDAL al módem, puede ocurrir una condición de Uso de memoria previamente liberada en Snapdragon Automobile, Snapdra... • http://www.securitytracker.com/id/1041432 • CWE-416: Use After Free •