| Max CVSS | 7.2 | Min CVSS | 4.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-18305 | 6.9 |
XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835.
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18296 | 7.2 |
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18294 | 7.2 |
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18280 | 7.2 |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, Snapdragon_High_Med_2016, when
|
03-10-2019 - 00:03 | 20-09-2018 - 13:29 | |
| CVE-2017-18293 | 7.2 |
When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM960
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18299 | 4.9 |
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450,
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18282 | 7.2 |
Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18283 | 6.1 |
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660.
|
03-10-2019 - 00:03 | 23-10-2018 - 13:29 | |
| CVE-2017-18292 | 4.9 |
Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD
|
10-12-2018 - 16:45 | 23-10-2018 - 13:29 | |
| CVE-2017-18298 | 7.2 |
Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/
|
10-12-2018 - 16:27 | 23-10-2018 - 13:29 | |
| CVE-2017-18300 | 4.9 |
Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SDA660.
|
10-12-2018 - 15:09 | 23-10-2018 - 13:29 | |
| CVE-2017-18303 | 7.2 |
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/
|
10-12-2018 - 14:53 | 23-10-2018 - 13:29 | |
| CVE-2017-18304 | 7.2 |
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM
|
10-12-2018 - 14:52 | 23-10-2018 - 13:29 | |
| CVE-2017-18297 | 7.2 |
Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820.
|
07-12-2018 - 21:11 | 23-10-2018 - 13:29 | |
| CVE-2017-18295 | 7.2 |
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD
|
06-12-2018 - 17:20 | 23-10-2018 - 13:29 | |
| CVE-2017-18302 | 4.7 |
In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, a crafted HLOS client can m
|
23-11-2018 - 15:51 | 20-09-2018 - 13:29 | |
| CVE-2017-18301 | 4.9 |
In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDM630, SDM636, SDM660,
|
23-11-2018 - 15:49 | 20-09-2018 - 13:29 |