Vulnerabilities > Qualcomm > Qcs605 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2019-12-12 CVE-2019-2288 Classic Buffer Overflow vulnerability in Qualcomm products
Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130
local
low complexity
qualcomm CWE-120
7.2
2019-12-12 CVE-2019-10559 Out-of-bounds Read vulnerability in Qualcomm products
Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
network
low complexity
qualcomm CWE-125
7.5
2019-12-12 CVE-2019-10485 Infinite Loop vulnerability in Qualcomm products
Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130
network
low complexity
qualcomm CWE-835
7.8
2019-11-21 CVE-2019-2339 Improper Validation of Array Index vulnerability in Qualcomm products
Out of bound access due to lack of check of whiltelist array size while reading the image elf segments.
local
low complexity
qualcomm CWE-129
7.2
2019-11-21 CVE-2019-2329 Use After Free vulnerability in Qualcomm products
Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.
local
low complexity
qualcomm CWE-416
7.2
2019-11-21 CVE-2019-2315 Unspecified vulnerability in Qualcomm products
While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment.
local
low complexity
qualcomm
7.2
2019-11-21 CVE-2019-2303 Out-of-bounds Read vulnerability in Qualcomm products
SNDCP module may access array out side its boundary when it receives malformed XID message.
network
low complexity
qualcomm CWE-125
7.5
2019-11-21 CVE-2019-2268 Out-of-bounds Read vulnerability in Qualcomm products
Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150
network
low complexity
qualcomm CWE-125
7.5
2019-11-21 CVE-2019-2251 Classic Buffer Overflow vulnerability in Qualcomm products
If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow.
local
low complexity
qualcomm CWE-120
7.2
2019-11-21 CVE-2018-13916 Classic Buffer Overflow vulnerability in Qualcomm products
Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data.
local
low complexity
qualcomm CWE-120
7.2