Qualcomm SD 600 Firmware vulnerabilities

81 CVEs affecting Qualcomm SD 600 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-2332, published 2019-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-2307, published 2019-07-25. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,…
CVE-2015-9201, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645,…
CVE-2017-17773, published 2018-03-15. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD…
CVE-2014-10054, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W,…
CVE-2015-9223, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio…
CVE-2015-9148, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD…
CVE-2016-10473, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD…
CVE-2016-10441, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD…
CVE-2015-9224, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625,…
CVE-2015-9143, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD…

Latest

CVE-2019-2332, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2019-2331, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2019-2324, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2019-10542, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics…
CVE-2019-10541, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2019-10534, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2019-10533, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2019-10522, published 2019-11-06. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2019-10488, published 2019-11-06. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2019-10508, published 2019-09-30. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…