SF
Product
Sdx20 Firmware
395
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 176High 192Medium 27Low 0
Watch
Add Sdx20 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5883 | 7.8 | Jun 14 | Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2018-11939 | 7.8 | Jun 14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150,… Affected: All versions, or not specified |
| CVE-2018-11934 | 7.8 | Jun 14 | Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11929 | 7.8 | Jun 14 | Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11819 | 7.8 | Jun 14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206,… Affected: All versions, or not specified |
| CVE-2019-2248 | 7.8 | May 24 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2247 | 7.8 | May 24 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13899 | 7.8 | May 24 | Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11967 | 7.8 | May 24 | Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace… Affected: All versions, or not specified |
| CVE-2018-13895 | 7.8 | May 24 | Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11968 | 7.8 | May 24 | Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2018-11928 | 7.8 | May 24 | Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2018-11927 | 7.8 | May 24 | Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11925 | 7.8 | May 24 | Data length received from firmware is not validated against the max allowed size which can result in buffer overflow Affected: All versions, or not specified |
| CVE-2018-11924 | 7.8 | May 24 | Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2018-11923 | 7.8 | May 24 | Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2017-18279 | 7.8 | May 6 | Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019,… Affected: All versions, or not specified |
| CVE-2017-18157 | 7.8 | May 6 | A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD… Affected: All versions, or not specified |
| CVE-2017-18156 | 7.8 | May 6 | While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650,… Affected: All versions, or not specified |
| CVE-2018-11966 | 7.8 | Apr 4 | Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2018-13914 | 7.8 | Feb 25 | Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-13913 | 7.8 | Feb 25 | Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,… Affected: All versions, or not specified |
| CVE-2018-13900 | 7.8 | Feb 25 | Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-11899 | 7.8 | Feb 11 | While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-5877 | 7.8 | Nov 28 | In the device programmer target-side code for firehose, a string may not be properly NULL terminated can lead to a incorrect buffer size in Snapdragon Automobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11996 | 7.8 | Nov 28 | When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206,… Affected: All versions, or not specified |
| CVE-2018-11870 | 7.8 | Oct 29 | Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11871 | 7.8 | Oct 29 | Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11305 | 7.8 | Oct 26 | When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206,… Affected: All versions, or not specified |
| CVE-2018-11850 | 7.8 | Oct 26 | Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version… Affected: All versions, or not specified |
| CVE-2018-11849 | 7.8 | Oct 26 | Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2017-18124 | 7.8 | Oct 26 | During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version… Affected: All versions, or not specified |
| CVE-2017-18295 | 7.8 | Oct 23 | Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650,… Affected: All versions, or not specified |
| CVE-2017-18294 | 7.8 | Oct 23 | While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon… Affected: All versions, or not specified |
| CVE-2017-18296 | 7.8 | Oct 23 | Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2017-18303 | 7.8 | Oct 23 | While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2017-18304 | 7.8 | Oct 23 | Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and… Affected: All versions, or not specified |
| CVE-2018-11267 | 7.8 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD… Affected: All versions, or not specified |
| CVE-2018-11269 | 7.8 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD… Affected: All versions, or not specified |
| CVE-2018-11268 | 7.8 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD… Affected: All versions, or not specified |
| CVE-2018-11285 | 7.8 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415,… Affected: All versions, or not specified |
| CVE-2018-11258 | 7.8 | Jul 6 | In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD… Affected: All versions, or not specified |
| CVE-2018-5838 | 7.8 | Jul 6 | Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger Affected: All versions, or not specified |
| CVE-2016-10451 | 7.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD… Affected: All versions, or not specified |
| CVE-2018-11259 | 7.7 | Jul 6 | Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be… Affected: All versions, or not specified |
| CVE-2022-33299 | 7.5 | Jan 6 | Null pointer dereference in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2022-33290 | 7.5 | Jan 6 | Null pointer dereference in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2022-25710 | 7.5 | Nov 15 | Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30273 | 7.5 | Jan 3 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30310 | 7.5 | Oct 20 | Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |