15 results (0.004 seconds)

CVSS: 9.3EPSS: 0%CPEs: 66EXPL: 0

CVE-2018-11285

https://notcve.org/view.php?id=CVE-2018-11285

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, while parsing FLAC file with corrupted picture block, a buffer over-read can occur. En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9206, MDM9607, MDM9650, MSM8909W,... • https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components • CWE-125: Out-of-bounds Read •

CVSS: 10.0EPSS: 0%CPEs: 74EXPL: 0

CVE-2017-18314

https://notcve.org/view.php?id=CVE-2017-18314

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, on TZ cold boot the CNOC_QDSS RG0 locked by xBL_SEC is cleared by TZ. En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9206, MDM9607,... • https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components •

CVSS: 6.5EPSS: 0%CPEs: 62EXPL: 0

CVE-2018-5871

https://notcve.org/view.php?id=CVE-2018-5871

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, MAC address randomization performed during probe requests (for privacy reasons) is not done properly due to a flawed RNG which produces repeating output much earlier than expected.... • https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components • CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) •

CVSS: 7.5EPSS: 0%CPEs: 72EXPL: 0

CVE-2018-11291

https://notcve.org/view.php?id=CVE-2018-11291

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, cryptographic issues due to the random number generator was not a strong one in NAN. En Snapdragon (Automobile, Mobile y Wear) e... • http://www.securityfocus.com/bid/107681 • CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) •

CVSS: 7.8EPSS: 0%CPEs: 42EXPL: 0

CVE-2017-18280

https://notcve.org/view.php?id=CVE-2017-18280

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, Snapdragon_High_Med_2016, when a Trusted Application has opened the SPI/I2C interface to a particular device, it is possible for another Trusted Application to read the data on this open interface by calling the SPI/I2C read function. En Snapdragon (Automobile, Mobile y Wear) en versiones MD... • http://www.securitytracker.com/id/1041432 •

CVSS: 7.8EPSS: 0%CPEs: 70EXPL: 0

CVE-2018-11269

https://notcve.org/view.php?id=CVE-2018-11269

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options. En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9206, MDM9607, MDM9635M, MDM... • http://www.securityfocus.com/bid/105838 • CWE-129: Improper Validation of Array Index •

CVSS: 5.5EPSS: 0%CPEs: 46EXPL: 0

CVE-2017-18301

https://notcve.org/view.php?id=CVE-2017-18301

20 Sep 2018 — In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, providing the NULL argument of ICE regulator while processing create key IOCTL results in system restart. En Small Cell SoC and Snapdragon (Automobile, Mobile y Wear) en versiones FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8... • http://www.securitytracker.com/id/1041432 • CWE-476: NULL Pointer Dereference •

CVSS: 7.8EPSS: 0%CPEs: 70EXPL: 0

CVE-2018-11268

https://notcve.org/view.php?id=CVE-2018-11268

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options. En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9206, MDM9607, MDM9635M, MDM... • http://www.securityfocus.com/bid/106845 • CWE-129: Improper Validation of Array Index •

CVSS: 10.0EPSS: 0%CPEs: 58EXPL: 0

CVE-2018-11287

https://notcve.org/view.php?id=CVE-2018-11287

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, incorrect control flow implementation in Video while checking buffer sufficiency. En Snapdragon (Automobile, Mobile y Wear) en versiones MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/S... • https://source.android.com/security/bulletin/2018-09-01#qualcomm-closed-source-components • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 78EXPL: 0

CVE-2018-11267

https://notcve.org/view.php?id=CVE-2018-11267

20 Sep 2018 — In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, when sending an malformed XML data to deviceprogrammer/firehose it may do an out of bounds buffer write allowing a region of memory to be f... • http://www.securityfocus.com/bid/106128 • CWE-129: Improper Validation of Array Index •