S8
Product
SD 850 Firmware
306
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 120High 145Medium 41Low 0
Watch
Add SD 850 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-11858 | 7.8 | Oct 29 | When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version SD 835, SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2018-11857 | 7.8 | Oct 29 | Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2018-11856 | 7.8 | Oct 29 | Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2018-5866 | 7.8 | Oct 26 | While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2018-11950 | 7.8 | Oct 26 | Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2018-11854 | 7.8 | Oct 26 | Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 Affected: All versions, or not specified |
| CVE-2018-11853 | 7.8 | Oct 26 | Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206,… Affected: All versions, or not specified |
| CVE-2018-11850 | 7.8 | Oct 26 | Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version… Affected: All versions, or not specified |
| CVE-2018-11849 | 7.8 | Oct 26 | Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in… Affected: All versions, or not specified |
| CVE-2018-11824 | 7.8 | Oct 26 | A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD… Affected: All versions, or not specified |
| CVE-2018-11822 | 7.8 | Oct 26 | A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 Affected: All versions, or not specified |
| CVE-2018-11821 | 7.8 | Oct 26 | Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430,… Affected: All versions, or not specified |
| CVE-2017-18124 | 7.8 | Oct 26 | During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version… Affected: All versions, or not specified |
| CVE-2017-18298 | 7.8 | Oct 23 | Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650,… Affected: All versions, or not specified |
| CVE-2018-11257 | 7.8 | Jul 6 | Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2018-11259 | 7.7 | Jul 6 | Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be… Affected: All versions, or not specified |
| CVE-2019-10488 | 7.5 | Nov 6 | Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10489 | 7.5 | Sep 30 | Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-2334 | 7.5 | Jul 25 | Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-2273 | 7.5 | Jul 25 | IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2018-13902 | 7.5 | Jun 14 | Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2016-10499 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2016-10497 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2016-10469 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD… Affected: All versions, or not specified |
| CVE-2016-10455 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2016-10427 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2015-9213 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2015-9193 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2015-9176 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2015-9166 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650,… Affected: All versions, or not specified |
| CVE-2015-9163 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2015-9137 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2015-9123 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9615,… Affected: All versions, or not specified |
| CVE-2015-9119 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2017-18143 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are collected when debugging is not enabled Affected: All versions, or not specified |
| CVE-2017-18128 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers… Affected: All versions, or not specified |
| CVE-2017-18125 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when… Affected: All versions, or not specified |
| CVE-2019-10495 | 7.3 | Nov 6 | Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding Affected: All versions, or not specified |
| CVE-2018-5839 | 7.1 | Feb 25 | Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2017-18309 | 7.1 | Oct 26 | A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2019-2284 | 7.0 | Sep 30 | Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2345 | 7.0 | Jul 25 | Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2019-2314 | 7.0 | Jul 25 | Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2260 | 7.0 | Jul 22 | A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13909 | 7.0 | Jun 14 | Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |