S8
Product
SD 850 Firmware
306
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 120High 145Medium 41Low 0
Watch
Add SD 850 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-9163 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD… Affected: All versions, or not specified |
| CVE-2015-9137 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2015-9123 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9615,… Affected: All versions, or not specified |
| CVE-2015-9119 | 7.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645,… Affected: All versions, or not specified |
| CVE-2017-18143 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, on a secure device, PD dumps are collected when debugging is not enabled Affected: All versions, or not specified |
| CVE-2017-18128 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers… Affected: All versions, or not specified |
| CVE-2017-18125 | 7.5 | Apr 11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, when… Affected: All versions, or not specified |
| CVE-2019-10495 | 7.3 | Nov 6 | Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding Affected: All versions, or not specified |
| CVE-2018-5839 | 7.1 | Feb 25 | Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2017-18309 | 7.1 | Oct 26 | A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850 Affected: All versions, or not specified |
| CVE-2019-2284 | 7.0 | Sep 30 | Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2345 | 7.0 | Jul 25 | Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2019-2314 | 7.0 | Jul 25 | Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2260 | 7.0 | Jul 22 | A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-13909 | 7.0 | Jun 14 | Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2016-10443 | 6.8 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640,… Affected: All versions, or not specified |
| CVE-2019-10504 | 6.5 | Nov 6 | Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-5916 | 6.5 | Nov 28 | Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions… Affected: All versions, or not specified |
| CVE-2017-18283 | 6.5 | Oct 23 | Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD… Affected: All versions, or not specified |
| CVE-2017-18307 | 5.5 | Nov 26 | Information disclosure possible while audio playback Affected: All versions, or not specified |
| CVE-2017-18306 | 5.5 | Nov 26 | Information disclosure due to uninitialized variable Affected: All versions, or not specified |
| CVE-2018-11922 | 5.5 | Nov 26 | Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user Affected: All versions, or not specified |
| CVE-2019-10520 | 5.5 | Dec 12 | An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2019-2275 | 5.5 | Nov 6 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends on CVE-2018-13907)… Affected: All versions, or not specified |
| CVE-2019-10515 | 5.5 | Nov 6 | DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2343 | 5.5 | Jul 25 | Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2330 | 5.5 | Jul 25 | improper input validation in allocation request for secure allocations can lead to page fault Affected: All versions, or not specified |
| CVE-2019-2241 | 5.5 | Jul 25 | While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to unintended SUI behaviour in Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2240 | 5.5 | Jul 25 | While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2019-2239 | 5.5 | Jul 25 | Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2261 | 5.5 | Jul 22 | Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2243 | 5.5 | Jul 22 | Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure Affected: All versions, or not specified |
| CVE-2018-13901 | 5.5 | Jun 14 | Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11947 | 5.5 | Jun 14 | The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2018-11942 | 5.5 | Jun 14 | Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2017-8252 | 5.5 | Jun 14 | Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-13885 | 5.5 | May 24 | Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2018-12005 | 5.5 | May 24 | An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2018-12004 | 5.5 | May 24 | Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2018-11976 | 5.5 | May 24 | ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2018-11971 | 5.5 | Apr 4 | Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2018-13912 | 5.5 | Feb 25 | Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-11948 | 5.5 | Feb 25 | Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11864 | 5.5 | Feb 25 | Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2018-11845 | 5.5 | Feb 25 | Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2018-11820 | 5.5 | Feb 25 | Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-3595 | 5.5 | Jan 18 | Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear… Affected: All versions, or not specified |
| CVE-2017-18332 | 5.5 | Jan 18 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640,… Affected: All versions, or not specified |
| CVE-2018-11999 | 5.5 | Jan 18 | Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M,… Affected: All versions, or not specified |
| CVE-2017-18327 | 5.5 | Jan 3 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640,… Affected: All versions, or not specified |