← Back

Sd 650 Firmware

sd_650_firmware

Vendor: Qualcomm • 317 CVEs

CVEs (317)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18296
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, M...Show more
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.Show less
CVE-2017-18295
1Qualcomm
19Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+16 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205,...Show more
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDX20.Show less
CVE-2017-18294
1Qualcomm
24Fsm9055 Firmware
Mdm9206 FirmwareMdm9607 Firmware+21 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in...Show more
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.Show less
CVE-2017-18293
1Qualcomm
14Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+11 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon W...Show more
When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.Show less
CVE-2017-18292
1Qualcomm
21Msm8909w Firmware
Msm8996au FirmwareSd 205 Firmware+18 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/1...Show more
Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A.Show less
CVE-2017-18277
1Qualcomm
23Mdm9206 Firmware
Mdm9607 FirmwareMdm9640 Firmware+20 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in ve...Show more
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCN5502, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835.Show less
CVE-2017-18172
1Qualcomm
24Mdm9635m Firmware
Sd 400 FirmwareSd 410 Firmware+21 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in vers...Show more
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.Show less
CVE-2017-18171
1Qualcomm
25Qca9379 Firmware
Sd 205 FirmwareSd 210 Firmware+22 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
8.8 HIGH· v3
8.3 HIGH· v2
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD...Show more
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.Show less
CVE-2017-18170
1Qualcomm
25Qca9379 Firmware
Sd 205 FirmwareSd 210 Firmware+22 more
Nov 21, 2024
Oct 23, 2018
N/A· v4
8.8 HIGH· v3
8.3 HIGH· v2
Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/1...Show more
Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.Show less
CVE-2018-5894
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.
CVE-2018-5892
1Qualcomm
27Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+24 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5891
1Qualcomm
15Msm8909w Firmware
Msm8996au FirmwareSd 205 Firmware+12 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
8.4 HIGH· v3
4.6 MEDIUM· v2
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local var...Show more
While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear.Show less
CVE-2018-5882
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5876
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5875
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5874
1Qualcomm
24Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+21 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear.
CVE-2018-5838
1Qualcomm
26Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+23 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.
CVE-2018-11259
1Qualcomm
38Mdm9206 Firmware
Mdm9607 FirmwareMdm9635m Firmware+35 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
7.7 HIGH· v3
3.6 LOW· v2
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure...Show more
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition.Show less
CVE-2018-11258
1Qualcomm
21Mdm9206 Firmware
Mdm9607 FirmwareMdm9650 Firmware+18 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/1...Show more
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20.Show less
CVE-2017-11088
1Qualcomm
14Msm8909w Firmware
Msm8996au FirmwareSd 205 Firmware+11 more
Nov 21, 2024
Jul 6, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/...Show more
Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845.Show less