S8
Product
SD 855 Firmware
by Qualcomm · last CVE Dec 12, 2019
136
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 47High 73Medium 16Low 0
Watch

Add SD 855 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11924
7.8
0%
May 24
Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2018-11923
7.8
0%
May 24
Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2018-13918
7.8
0%
Apr 4
kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2018-11966
7.8
0%
Apr 4
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
Affected: All versions, or not specified
CVE-2018-13913
7.8
0%
Feb 25
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
Affected: All versions, or not specified
CVE-2018-13905
7.8
0%
Feb 25
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2018-13900
7.8
0%
Feb 25
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2018-11899
7.8
0%
Feb 11
While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2018-13888
7.8
0%
Feb 11
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-10488
7.5
1%
Nov 6
Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10489
7.5
1%
Sep 30
Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-2334
7.5
1%
Jul 25
Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-2273
7.5
1%
Jul 25
IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2018-13897
7.5
1%
Jul 25
Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2018-13902
7.5
1%
Jun 14
Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-10495
7.3
0%
Nov 6
Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding
Affected: All versions, or not specified
CVE-2018-5839
7.1
0%
Feb 25
Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2284
7.0
0%
Sep 30
Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2314
7.0
0%
Jul 25
Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2260
7.0
0%
Jul 22
A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10520
5.5
0%
Dec 12
An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory in Snapdragon Mobile,…
Affected: All versions, or not specified
CVE-2019-2275
5.5
0%
Nov 6
While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends on CVE-2018-13907)…
Affected: All versions, or not specified
CVE-2019-10515
5.5
0%
Nov 6
DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2343
5.5
0%
Jul 25
Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2330
5.5
0%
Jul 25
improper input validation in allocation request for secure allocations can lead to page fault
Affected: All versions, or not specified
CVE-2019-2241
5.5
0%
Jul 25
While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to unintended SUI behaviour in Snapdragon…
Affected: All versions, or not specified
CVE-2019-2240
5.5
0%
Jul 25
While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-2261
5.5
0%
Jul 22
Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-2243
5.5
0%
Jul 22
Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure
Affected: All versions, or not specified
CVE-2018-13901
5.5
0%
Jun 14
Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2018-11947
5.5
0%
Jun 14
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2018-11942
5.5
0%
Jun 14
Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2017-8252
5.5
0%
Jun 14
Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2018-12005
5.5
0%
May 24
An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
Affected: All versions, or not specified
CVE-2017-18324
5.5
0%
Jan 3
Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650,…
Affected: All versions, or not specified
CVE-2018-13907
5.3
1%
Jun 14
While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snapdragon Auto,…
Affected: All versions, or not specified
Page 3 of 3 · 136 total