S6
Product
SD 652 Firmware
315
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 168High 115Medium 32Low 0
Watch
Add SD 652 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18144 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD… Affected: All versions, or not specified |
| CVE-2017-18140 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2017-18139 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2017-18138 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2017-18137 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while… Affected: All versions, or not specified |
| CVE-2017-18136 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650,… Affected: All versions, or not specified |
| CVE-2017-18135 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service… Affected: All versions, or not specified |
| CVE-2017-18130 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD… Affected: All versions, or not specified |
| CVE-2017-18127 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD… Affected: All versions, or not specified |
| CVE-2017-18071 | 9.8 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD… Affected: All versions, or not specified |
| CVE-2017-14915 | 9.8 | Mar 30 | In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free… Affected: All versions, or not specified |
| CVE-2017-14913 | 9.8 | Mar 30 | In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated Affected: All versions, or not specified |
| CVE-2017-14912 | 9.8 | Mar 30 | In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425,… Affected: All versions, or not specified |
| CVE-2017-14911 | 9.8 | Mar 30 | In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD… Affected: All versions, or not specified |
| CVE-2017-17773 | 9.8 | Mar 15 | In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD… Affected: All versions, or not specified |
| CVE-2017-14910 | 9.8 | Feb 23 | In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617,… Affected: All versions, or not specified |
| CVE-2018-13906 | 9.1 | Jun 14 | The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2016-10492 | 9.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650,… Affected: All versions, or not specified |
| CVE-2018-11279 | 8.8 | Jan 18 | Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206,… Affected: All versions, or not specified |
| CVE-2017-18171 | 8.8 | Oct 23 | Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD… Affected: All versions, or not specified |
| CVE-2017-18170 | 8.8 | Oct 23 | Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425,… Affected: All versions, or not specified |
| CVE-2018-5876 | 8.8 | Jul 6 | While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2018-5875 | 8.8 | Jul 6 | While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2018-5874 | 8.8 | Jul 6 | While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear Affected: All versions, or not specified |
| CVE-2018-5891 | 8.4 | Jul 6 | While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available Affected: All versions, or not specified |
| CVE-2016-10439 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD… Affected: All versions, or not specified |
| CVE-2016-10435 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MDM9640,… Affected: All versions, or not specified |
| CVE-2016-10433 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2016-10432 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52,… Affected: All versions, or not specified |
| CVE-2016-10417 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625,… Affected: All versions, or not specified |
| CVE-2016-10409 | 8.1 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A,… Affected: All versions, or not specified |
| CVE-2018-5852 | 7.8 | Nov 26 | An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat' Affected: All versions, or not specified |
| CVE-2018-11952 | 7.8 | Nov 26 | An image with a version lower than the fuse version may potentially be booted lead to improper authentication Affected: All versions, or not specified |
| CVE-2017-9711 | 7.8 | Nov 22 | Certain unprivileged processes are able to perform IOCTL calls Affected: All versions, or not specified |
| CVE-2019-10508 | 7.8 | Sep 30 | Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-2290 | 7.8 | Jul 25 | Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-2272 | 7.8 | Jul 25 | Buffer overflow can occur in display function due to lack of validation of header block size set by user Affected: All versions, or not specified |
| CVE-2019-2263 | 7.8 | Jul 25 | Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-5913 | 7.8 | Jun 14 | A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-5903 | 7.8 | Jun 14 | Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13910 | 7.8 | Jun 14 | Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2018-13908 | 7.8 | Jun 14 | Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-11939 | 7.8 | Jun 14 | Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150,… Affected: All versions, or not specified |
| CVE-2019-2248 | 7.8 | May 24 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2247 | 7.8 | May 24 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13895 | 7.8 | May 24 | Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access to phone in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11967 | 7.8 | May 24 | Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace… Affected: All versions, or not specified |
| CVE-2017-18279 | 7.8 | May 6 | Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019,… Affected: All versions, or not specified |
| CVE-2017-18278 | 7.8 | May 6 | An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal value of the segment header, which may… Affected: All versions, or not specified |
| CVE-2017-18274 | 7.8 | May 6 | While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the… Affected: All versions, or not specified |