Vulmon Recent Vulnerabilities Trends Blog About Contact

mdm9206_firmware vulnerabilities and exploits

(subscribe to this query)

8.3
CVSSv2
CVE-2018-11993
Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607...
QualcommMdm9206 FirmwareMdm9607 Firmware
7.2
CVSSv2
CVE-2019-14051
Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607...
QualcommMdm9206 FirmwareMdm9607 Firmware
10
CVSSv2
CVE-2017-18132
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, MDM8996, an out-of-bounds access can potentially occur in tz_assign()....
QualcommMdm9206 FirmwareMdm9607 FirmwareMsm8996 Firmware
10
CVSSv2
CVE-2017-18129
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains....
QualcommMdm9206 FirmwareMdm9607 FirmwareMsm8996 FirmwareMsm8998 FirmwareSd 845 Firmware
10
CVSSv2
CVE-2017-14913
In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated....
QualcommMdm9206 FirmwareSd 625 FirmwareSd 650 FirmwareSd 652 FirmwareSd 835 FirmwareSd 845 Firmware
9.4
CVSSv2
CVE-2019-14082
Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and...
QualcommIpq8074 FirmwareMdm9206 FirmwareMdm9207c FirmwareMdm9607 FirmwareQcn7605 FirmwareSm8150 Firmware
10
CVSSv2
CVE-2017-18133
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an out of bound access for ebi channel array can potentially occur....
QualcommMdm9206 FirmwareMdm9607 FirmwareMdm9650 FirmwareSd 205 FirmwareSd 210 FirmwareSd 212 FirmwareSd 835 Firmware
6.9
CVSSv2
CVE-2017-18305
XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835....
QualcommMdm9206 FirmwareMdm9607 FirmwareMdm9650 FirmwareSd 205 FirmwareSd 210 FirmwareSd 212 FirmwareSd 835 Firmware
10
CVSSv2
CVE-2016-10502
While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835 and SDA660....
QualcommMdm9206 FirmwareMdm9607 FirmwareMdm9650 FirmwareSd 205 FirmwareSd 210 FirmwareSd 212 FirmwareSd 835 FirmwareSda660 Firmware
4.9
CVSSv2
CVE-2017-18300
Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SDA660....
QualcommMdm9206 FirmwareMdm9607 FirmwareMdm9650 FirmwareSd 205 FirmwareSd 210 FirmwareSd 212 FirmwareSd 835 FirmwareSda660 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2019-15126upsourcecombodoCVE-2020-15826CVE-2020-11984TCPetcdyoutrackCVE-2020-16221CVE-2020-11209CVE-2020-15821buffer overflowXXE