Vulnerabilities > Qualcomm > SD 835 Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-11-26 CVE-2017-18306 Use of Uninitialized Resource vulnerability in Qualcomm products
Information disclosure due to uninitialized variable.
local
low complexity
qualcomm CWE-908
5.5
2024-11-26 CVE-2017-18307 Unspecified vulnerability in Qualcomm products
Information disclosure possible while audio playback.
local
low complexity
qualcomm
5.5
2024-11-26 CVE-2018-5852 Integer Underflow (Wrap or Wraparound) vulnerability in Qualcomm products
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'
local
low complexity
qualcomm CWE-191
7.8
2024-11-26 CVE-2016-10394 Improper Authentication vulnerability in Qualcomm products
Initial xbl_sec revision does not have all the debug policy features and critical checks.
local
low complexity
qualcomm CWE-287
7.8
2024-11-26 CVE-2017-11076 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
network
low complexity
qualcomm CWE-119
critical
9.8
2024-11-26 CVE-2017-15832 Out-of-bounds Write vulnerability in Qualcomm products
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
local
low complexity
qualcomm CWE-787
7.8
2024-11-26 CVE-2017-17772 Out-of-bounds Read vulnerability in Qualcomm products
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
network
low complexity
qualcomm CWE-125
critical
9.8
2024-11-26 CVE-2018-11952 Improper Authentication vulnerability in Qualcomm products
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
local
low complexity
qualcomm CWE-287
7.8
2024-11-22 CVE-2017-9711 Unspecified vulnerability in Qualcomm products
Certain unprivileged processes are able to perform IOCTL calls.
local
low complexity
qualcomm
7.8
2019-12-12 CVE-2019-10530 Integer Overflow or Wraparound vulnerability in Qualcomm products
Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
local
low complexity
qualcomm CWE-190
7.8