S4
Product
SD 430 Firmware
374
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 178High 156Medium 40Low 0
Watch
Add SD 430 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-11888 | 7.8 | Feb 11 | Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-11847 | 7.8 | Feb 11 | Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in… Affected: All versions, or not specified |
| CVE-2018-5880 | 7.8 | Jan 18 | Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD… Affected: All versions, or not specified |
| CVE-2018-5868 | 7.8 | Jan 18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 /… Affected: All versions, or not specified |
| CVE-2018-5867 | 7.8 | Jan 18 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M,… Affected: All versions, or not specified |
| CVE-2017-8276 | 7.8 | Jan 18 | Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205,… Affected: All versions, or not specified |
| CVE-2017-18330 | 7.8 | Jan 3 | Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607,… Affected: All versions, or not specified |
| CVE-2017-18329 | 7.8 | Jan 3 | Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655,… Affected: All versions, or not specified |
| CVE-2017-18328 | 7.8 | Jan 3 | Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2017-18320 | 7.8 | Jan 3 | QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425,… Affected: All versions, or not specified |
| CVE-2017-18141 | 7.8 | Jan 3 | When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be… Affected: All versions, or not specified |
| CVE-2018-5918 | 7.8 | Nov 28 | Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions… Affected: All versions, or not specified |
| CVE-2018-5917 | 7.8 | Nov 28 | Possible buffer overflow in OEM crypto function due to improper input validation in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625,… Affected: All versions, or not specified |
| CVE-2018-11994 | 7.8 | Nov 28 | SMMU secure camera logic allows secure camera controllers to access HLOS memory during session in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206,… Affected: All versions, or not specified |
| CVE-2018-11921 | 7.8 | Nov 28 | Failure condition is not handled properly and the correct error code is not returned Affected: All versions, or not specified |
| CVE-2018-11264 | 7.8 | Nov 28 | Possible buffer overflow in Ontario fingerprint code due to lack of input validation for the parameters coming into TZ from HLOS in Snapdragon Automobile, Snapdragon Mobile and… Affected: All versions, or not specified |
| CVE-2017-18316 | 7.8 | Nov 28 | Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607,… Affected: All versions, or not specified |
| CVE-2018-11871 | 7.8 | Oct 29 | Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11866 | 7.8 | Oct 29 | Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in version… Affected: All versions, or not specified |
| CVE-2018-11865 | 7.8 | Oct 29 | Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in version MDM9206,… Affected: All versions, or not specified |
| CVE-2018-5914 | 7.8 | Oct 26 | Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear… Affected: All versions, or not specified |
| CVE-2018-5866 | 7.8 | Oct 26 | While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2018-11853 | 7.8 | Oct 26 | Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206,… Affected: All versions, or not specified |
| CVE-2018-11849 | 7.8 | Oct 26 | Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2018-11821 | 7.8 | Oct 26 | Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430,… Affected: All versions, or not specified |
| CVE-2018-11305 | 7.8 | Oct 26 | When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206,… Affected: All versions, or not specified |
| CVE-2017-18311 | 7.8 | Oct 26 | XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile,… Affected: All versions, or not specified |
| CVE-2017-18310 | 7.8 | Oct 26 | ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD… Affected: All versions, or not specified |
| CVE-2017-18308 | 7.8 | Oct 26 | Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD… Affected: All versions, or not specified |
| CVE-2017-18124 | 7.8 | Oct 26 | During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version… Affected: All versions, or not specified |
| CVE-2017-18304 | 7.8 | Oct 23 | Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and… Affected: All versions, or not specified |
| CVE-2017-18303 | 7.8 | Oct 23 | While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2017-18298 | 7.8 | Oct 23 | Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650,… Affected: All versions, or not specified |
| CVE-2017-18297 | 7.8 | Oct 23 | Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820 Affected: All versions, or not specified |
| CVE-2017-18296 | 7.8 | Oct 23 | Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2017-18294 | 7.8 | Oct 23 | While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon… Affected: All versions, or not specified |
| CVE-2017-18293 | 7.8 | Oct 23 | When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers… Affected: All versions, or not specified |
| CVE-2017-18172 | 7.8 | Oct 23 | In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in… Affected: All versions, or not specified |
| CVE-2018-5838 | 7.8 | Jul 6 | Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger Affected: All versions, or not specified |
| CVE-2016-10451 | 7.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD… Affected: All versions, or not specified |
| CVE-2015-9217 | 7.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427,… Affected: All versions, or not specified |
| CVE-2018-11259 | 7.7 | Jul 6 | Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be… Affected: All versions, or not specified |
| CVE-2019-10488 | 7.5 | Nov 6 | Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10489 | 7.5 | Sep 30 | Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-2334 | 7.5 | Jul 25 | Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-2273 | 7.5 | Jul 25 | IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2018-13902 | 7.5 | Jun 14 | Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2018-11828 | 7.5 | Oct 26 | When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon… Affected: All versions, or not specified |
| CVE-2018-5892 | 7.5 | Jul 6 | The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2016-10499 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |