Vulnerabilities > Qualcomm > Sdm636 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2019-11-21 CVE-2019-2303 Out-of-bounds Read vulnerability in Qualcomm products
SNDCP module may access array out side its boundary when it receives malformed XID message.
network
low complexity
qualcomm CWE-125
7.5
2019-11-21 CVE-2019-2268 Out-of-bounds Read vulnerability in Qualcomm products
Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150
network
low complexity
qualcomm CWE-125
7.5
2019-11-21 CVE-2019-2251 Classic Buffer Overflow vulnerability in Qualcomm products
If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow.
local
low complexity
qualcomm CWE-120
7.2
2019-11-21 CVE-2018-13916 Classic Buffer Overflow vulnerability in Qualcomm products
Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data.
local
low complexity
qualcomm CWE-120
7.2
2019-11-06 CVE-2019-2302 Integer Overflow or Wraparound vulnerability in Qualcomm products
While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow.
network
low complexity
qualcomm CWE-190
7.5
2019-05-06 CVE-2017-18279 Integer Overflow or Wraparound vulnerability in Qualcomm products
Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.
local
low complexity
qualcomm CWE-190
7.2
2019-05-06 CVE-2017-18173 Integer Overflow or Wraparound vulnerability in Qualcomm products
In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.
local
low complexity
qualcomm CWE-190
7.2
2019-05-06 CVE-2017-18131 Improper Initialization vulnerability in Qualcomm products
In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016.
local
low complexity
qualcomm CWE-665
7.2
2018-10-29 CVE-2018-11871 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016.
local
low complexity
qualcomm CWE-119
7.2
2018-10-29 CVE-2018-11866 Integer Overflow or Wraparound vulnerability in Qualcomm products
Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.
local
low complexity
qualcomm CWE-190
7.2