Qualcomm SD 400 Firmware vulnerabilities

164 CVEs affecting Qualcomm SD 400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18172, published 2018-10-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-9222, published 2018-04-18. High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD…
CVE-2017-14912, published 2018-03-30. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD…
CVE-2015-9196, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper input validation in tzbsp_ocmem can cause…
CVE-2015-9201, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645,…
CVE-2015-9219, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, an integer overflow to buffer overflow can occur in a DRM API.
CVE-2015-9150, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, while computing the length of memory allocated for a Diag event, if…
CVE-2017-17773, published 2018-03-15. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD…
CVE-2015-9122, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, SD 210/SD 212/SD 205,…
CVE-2016-10449, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425,…
CVE-2014-10054, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W,…

Latest

CVE-2017-18172, published 2018-10-23. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile,…
CVE-2016-10501, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9635M, MDM9655, MSM8909W, SD 210/SD…
CVE-2016-10499, published 2018-04-18. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655,…
CVE-2016-10498, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD…
CVE-2016-10497, published 2018-04-18. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655,…
CVE-2016-10494, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9640, MDM9645, MDM9650, MDM9655,…
CVE-2016-10492, published 2018-04-18. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD…
CVE-2016-10491, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD…
CVE-2016-10490, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650,…
CVE-2016-10489, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, lack of address argument validation in qsee_get_tz_app_name() may lead to an untrusted pointer…