Qualcomm SDM636 Firmware vulnerabilities

244 CVEs affecting Qualcomm SDM636 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11076, published 2024-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3657, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 28.3% chance of exploitation in the next 30 days. u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in…
CVE-2015-9222, published 2018-04-18. High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD…
CVE-2019-10574, published 2020-04-16. High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days. Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2016-10458, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625,…
CVE-2016-10498, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD…
CVE-2016-10445, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD…
CVE-2015-9142, published 2018-04-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD…
CVE-2018-3591, published 2018-04-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD…
CVE-2019-10557, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…
CVE-2019-10581, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…

Latest

CVE-2017-11076, published 2024-11-26. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
CVE-2020-3639, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11196, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-11193, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2020-11123, published 2020-11-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the…
CVE-2020-3703, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow…
CVE-2020-3684, published 2020-11-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3673, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3670, published 2020-11-02. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute,…