Not rated

CVE-2018-11970 TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…

Description

TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile	Versions not published

References

www.qualcomm.com www.qualcomm.com

Timeline

Published April 4, 2019
Last modified August 5, 2024

The 8 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile →

CVE-2020-3615 Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue… Not rated CVE-2019-10623 Possible integer overflow can happen in host driver while processing user controlled string due to improper validation… Not rated CVE-2019-14086 Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit… Not rated CVE-2019-14085 Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto,… Not rated

Track this CVE