Qualcomm SD616 Firmware vulnerabilities

8 CVEs affecting Qualcomm SD616 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10491, published 2019-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-18314, published 2018-09-20. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD…
CVE-2018-11285, published 2018-09-20. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52,…
CVE-2018-11982, published 2018-09-20. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Snapdragon (Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD…
CVE-2018-11292, published 2018-09-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD…
CVE-2018-5871, published 2018-09-20. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625,…
CVE-2018-11267, published 2018-09-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600,…
CVE-2019-10491, published 2019-11-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2018-11277, published 2018-09-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845,…