Q2
Product
Qualcomm 215 Firmware
by Qualcomm · last CVE Nov 6, 2019
62
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 26High 28Medium 8Low 0
Watch

Add Qualcomm 215 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2332
9.8
1%
Nov 6
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2019-2331
9.8
1%
Nov 6
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-2325
9.8
1%
Nov 6
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-2323
9.8
1%
Nov 6
Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2285
9.8
1%
Nov 6
Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2283
9.8
1%
Nov 6
Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2258
9.8
1%
Nov 6
Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10541
9.8
1%
Nov 6
Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10534
9.8
1%
Nov 6
Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10533
9.8
1%
Nov 6
Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-10531
9.8
1%
Nov 6
Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607,…
Affected: All versions, or not specified
CVE-2019-10522
9.8
1%
Nov 6
While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-2294
9.8
1%
Sep 30
Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-2252
9.8
1%
Sep 30
Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10539
9.8
1%
Sep 30
Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-10538
9.8
1%
Sep 30
Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2019-2327
9.8
1%
Jul 25
Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-2322
9.8
1%
Jul 25
Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2254
9.8
1%
Jul 25
Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-2253
9.8
1%
Jul 25
Buffer over-read can occur while parsing an ogg file with a corrupted comment block
Affected: All versions, or not specified
CVE-2019-2287
9.8
1%
Jul 22
Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver
Affected: All versions, or not specified
CVE-2019-2279
9.8
1%
Jul 22
Shared memory gets updated with invalid data and may lead to access beyond the allocated memory
Affected: All versions, or not specified
CVE-2018-13924
9.8
1%
Jul 22
Lack of check to prevent the buffer length taking negative values can lead to stack overflow
Affected: All versions, or not specified
CVE-2018-13898
9.8
1%
Jun 14
Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2018-11955
9.8
1%
Jun 14
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2018-13906
9.1
1%
Jun 14
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
Showing 26