Snapdragon Automobile, Snapdragon Mobile vulnerabilities

Product

Snapdragon Automobile, Snapdragon Mobile

by Qualcomm, Inc. · last CVE Jan 18, 2019

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities39 In the news0 Timeline

Severity mix

Critical 24High 14Medium 1Low 0

Severity

All severities39 Critical24 High14 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Snapdragon Automobile, Snapdragon Mobile to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-10409	8.1	1%	Apr 18	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A,… Affected: SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835
CVE-2016-10439	8.1	1%	Apr 18	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD… Affected: SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A
CVE-2016-10432	8.1	1%	Apr 18	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52,… Affected: SD 410/12, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A
CVE-2018-5868	7.8	0%	Jan 18	Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 /… Affected: MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130
CVE-2017-18320	7.8	0%	Jan 3	QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425,… Affected: MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130
CVE-2018-5917	7.8	0%	Nov 28	Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625,… Affected: MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130
CVE-2017-18317	7.8	0%	Nov 28	Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile… Affected: MSM8996AU,SD 410/12,SD 820,SD 820A
CVE-2018-5912	7.8	0%	Nov 28	Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD… Affected: MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660
CVE-2017-18172	7.8	0%	Oct 23	In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in… Affected: MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016
CVE-2017-18312	7.8	0%	Oct 23	While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon… Affected: MSM8996AU, SD 410/12, SD 617, SD 650/52, SD 810, SD 820, SD 820A
CVE-2017-18155	7.8	0%	Jul 12	While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can… Affected: MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835
CVE-2016-10434	7.5	1%	Apr 18	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 820 and SD 820A, the input to RPMB write response function… Affected: SD 820, SD 820A
CVE-2016-10428	7.5	1%	Apr 18	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD… Affected: SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A
CVE-2016-10423	7.5	1%	Apr 18	In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD… Affected: SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A