2019

CVE-2018-11262

(json)

CVE numbers: CVE-2018-11262 [Bulletin-CVE-2018-11262]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details: In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT. [NIST-CVE-2018-11262]
Discovered by: Xuan Xing of Google [Discovery-CVE-2018-11262] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2018-11262]
Fixed on: 2018-04-10 [QC-CR#2221192]
Fix released on: 2019-02-05 [Bulletin-CVE-2018-11262]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11262]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11940

(json)

CVE numbers: CVE-2018-11940 [Bulletin-CVE-2018-11940]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details: Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SXR1130 [NIST-CVE-2018-11940]
Discovered by: Pengfei Ding (丁鹏飞) of Huawei [Discovery-CVE-2018-11940] on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-11940]
Fixed on: 2018-06-08 [QC-CR#2254946]
Fix released on: 2019-04-05 [Bulletin-CVE-2018-11940]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11940]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2269

(json)

CVE numbers: CVE-2019-2269 [Bulletin-CVE-2019-2269]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details:
Discovered by: on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2269]
Fixed on: 2018-07-11 [QC-CR#2264429]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2269]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2269]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11817

(json)

CVE numbers: CVE-2018-11817 [Bulletin-CVE-2018-11817]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details:
Discovered by: on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2018-11817]
Fixed on: 2018-07-18 [QC-CR#2241830]
Fix released on: 2019-03-05 [Bulletin-CVE-2018-11817]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11817]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2095

(json)

CVE numbers: CVE-2019-2095 [Bulletin-CVE-2019-2095]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-124232283. [NIST-CVE-2019-2095]
Discovered by: on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2095]
Fixed on: 2018-09-17 [A-124232283]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2095]
Affected versions: 9 [Bulletin-CVE-2019-2095] regex: (9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2095]
Fixed versions: 9 [Bulletin-CVE-2019-2095]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-9583

(json)

CVE numbers: CVE-2018-9583 [Bulletin-CVE-2018-9583]
Coordinated disclosure?: unknown
Categories: System
Details: In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-112860487. [NIST-CVE-2018-9583]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2018-9583] on: Unknown
Reported on: 2019-01-01 [Bulletin-CVE-2018-9583]
Fixed on: 2018-09-18 [A-112860487]
Fix released on: 2019-01-05 [Bulletin-CVE-2018-9583]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9583] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2018-9583]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2018-9583]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1988

(json)

CVE numbers: CVE-2019-1988 [Bulletin-CVE-2019-1988]
Coordinated disclosure?: unknown
Categories: Framework
Details: In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-118372692. [NIST-CVE-2019-1988]
Discovered by: on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1988]
Fixed on: 2018-10-24 [A-118372692]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1988]
Affected versions: 8.0, 8.1, 9 [Bulletin-CVE-2019-1988] regex: (8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1988]
Fixed versions: 8.0, 8.1, 9 [Bulletin-CVE-2019-1988]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1989

(json)

CVE numbers: CVE-2019-1989 [Bulletin-CVE-2019-1989]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In ih264d_fmt_conv_420sp_to_420p of ih264d_format_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118399205 [NIST-CVE-2019-1989]
Discovered by: on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2019-1989]
Fixed on: 2018-10-24 [A-118399205]
Fix released on: 2019-03-05 [Bulletin-CVE-2019-1989]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1989] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1989]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1989]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2028

(json)

CVE numbers: CVE-2019-2028 [Bulletin-CVE-2019-2028]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120644655. [NIST-CVE-2019-2028]
Discovered by: Suresh Sivaraman of Ittiam [Discovery-CVE-2019-2028] on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2019-2028]
Fixed on: 2018-11-07 [A-120644655]
Fix released on: 2019-04-05 [Bulletin-CVE-2019-2028]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2028] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2028]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2028]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1986

(json)

CVE numbers: CVE-2019-1986 [Bulletin-CVE-2019-1986]
Coordinated disclosure?: unknown
Categories: Framework
Details: In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-117838472. [NIST-CVE-2019-1986]
Discovered by: Leon Scroggins of Google [Discovery-CVE-2019-1986] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1986]
Fixed on: 2018-11-08 [A-117838472]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1986]
Affected versions: 9 [Bulletin-CVE-2019-1986] regex: (9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1986]
Fixed versions: 9 [Bulletin-CVE-2019-1986]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1987

(json)

CVE numbers: CVE-2019-1987 [Bulletin-CVE-2019-1987]
Coordinated disclosure?: unknown
Categories: Framework
Details: In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775. [NIST-CVE-2019-1987]
Discovered by: on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1987]
Fixed on: 2018-11-08 [A-118143775]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1987]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1987] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1987]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1987]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1990

(json)

CVE numbers: CVE-2019-1990 [Bulletin-CVE-2019-1990]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In ihevcd_fmt_conv_420sp_to_420p of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118453553 [NIST-CVE-2019-1990]
Discovered by: on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2019-1990]
Fixed on: 2018-11-12 [A-118453553]
Fix released on: 2019-03-05 [Bulletin-CVE-2019-1990]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1990] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1990]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1990]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1992

(json)

CVE numbers: CVE-2019-1992 [Bulletin-CVE-2019-1992]
Coordinated disclosure?: unknown
Categories: System
Details: In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116222069. [NIST-CVE-2019-1992]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2019-1992] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1992]
Fixed on: 2018-11-20 [A-116222069]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1992]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1992] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1992]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1992]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-1991

(json)

CVE numbers: CVE-2019-1991 [Bulletin-CVE-2019-1991]
Coordinated disclosure?: unknown
Categories: System
Details: In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-110166268. [NIST-CVE-2019-1991]
Discovered by: Zinuo Han (weibo.com/ele7enxxh) of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2019-1991] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2019-1991]
Fixed on: 2018-11-27 [A-110166268]
Fix released on: 2019-02-05 [Bulletin-CVE-2019-1991]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1991] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-1991]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-1991]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2009

(json)

CVE numbers: CVE-2019-2009 [Bulletin-CVE-2019-2009]
Coordinated disclosure?: unknown
Categories: System
Details: In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120665616 [NIST-CVE-2019-2009]
Discovered by: Jianjun Dai ( @jioun_dai) and Guang Gong ( @oldfresher) of 360 Alpha Team [Discovery-CVE-2019-2009] on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2019-2009]
Fixed on: 2018-12-11 [A-120665616]
Fix released on: 2019-03-05 [Bulletin-CVE-2019-2009]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2009] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2009]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2009]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2093

(json)

CVE numbers: CVE-2019-2093 [Bulletin-CVE-2019-2093]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-119292397. [NIST-CVE-2019-2093]
Discovered by: on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2093]
Fixed on: 2018-12-20 [A-119292397]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2093]
Affected versions: 9 [Bulletin-CVE-2019-2093] regex: (9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2093]
Fixed versions: 9 [Bulletin-CVE-2019-2093]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11847

(json)

CVE numbers: CVE-2018-11847 [Bulletin-CVE-2018-11847]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables and Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016 [NIST-CVE-2018-11847]
Discovered by: on: Unknown
Reported on: 2019-01-01 [Bulletin-CVE-2018-11847]
Fixed on: Unknown
Fix released on: 2019-01-05 [Bulletin-CVE-2018-11847]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11847]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2029

(json)

CVE numbers: CVE-2019-2029 [Bulletin-CVE-2019-2029]
Coordinated disclosure?: unknown
Categories: System
Details: In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120612744. [NIST-CVE-2019-2029]
Discovered by: Wenke Dou (email), Chi Zhang (email), and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team [Discovery-CVE-2019-2029] on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2019-2029]
Fixed on: 2019-01-09 [A-120612744]
Fix released on: 2019-04-05 [Bulletin-CVE-2019-2029]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2029] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2029]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2029]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2287

(json)

CVE numbers: CVE-2019-2287 [Bulletin-CVE-2019-2287]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details:
Discovered by: on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2287]
Fixed on: 2019-01-18 [2]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2287]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2287]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2111

(json)

CVE numbers: CVE-2019-2111 [Bulletin-CVE-2019-2111]
Coordinated disclosure?: unknown
Categories: System
Details: In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-122856181. [NIST-CVE-2019-2111]
Discovered by: Alex Abfalter of Google [Discovery-CVE-2019-2111] on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2111]
Fixed on: 2019-01-22 [2]
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2111]
Affected versions: 9 [Bulletin-CVE-2019-2111] regex: (9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2111]
Fixed versions: 9 [Bulletin-CVE-2019-2111]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2027

(json)

CVE numbers: CVE-2019-2027 [Bulletin-CVE-2019-2027]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119120561. [NIST-CVE-2019-2027]
Discovered by: Qi Zhao ( @JHyrathon) and Guang Gong (@oldfresher) of Alpha Team, Qihoo 360 Technology Co. Ltd. [Discovery-CVE-2019-2027] on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2019-2027]
Fixed on: 2019-01-23 [A-119120561]
Fix released on: 2019-04-05 [Bulletin-CVE-2019-2027]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2027] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2027]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2027]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2330

(json)

CVE numbers: CVE-2019-2330 [Bulletin-CVE-2019-2330]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details:
Discovered by: on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2330]
Fixed on: 2019-01-31 [QC-CR#2379952]
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2330]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2330]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11289

(json)

CVE numbers: CVE-2018-11289 [Bulletin-CVE-2018-11289]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. [NIST-CVE-2018-11289]
Discovered by: derrek (@derrekr6) [Discovery-CVE-2018-11289] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2018-11289]
Fixed on: Unknown
Fix released on: 2019-02-05 [Bulletin-CVE-2018-11289]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11289]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11820

(json)

CVE numbers: CVE-2018-11820 [Bulletin-CVE-2018-11820]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 800, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. [NIST-CVE-2018-11820]
Discovered by: derrek (@derrekr6) [Discovery-CVE-2018-11820] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2018-11820]
Fixed on: Unknown
Fix released on: 2019-02-05 [Bulletin-CVE-2018-11820]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11820]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11938

(json)

CVE numbers: CVE-2018-11938 [Bulletin-CVE-2018-11938]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130. [NIST-CVE-2018-11938]
Discovered by: derrek (@derrekr6) [Discovery-CVE-2018-11938] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2018-11938]
Fixed on: Unknown
Fix released on: 2019-02-05 [Bulletin-CVE-2018-11938]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11938]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11945

(json)

CVE numbers: CVE-2018-11945 [Bulletin-CVE-2018-11945]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130. [NIST-CVE-2018-11945]
Discovered by: on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2018-11945]
Fixed on: Unknown
Fix released on: 2019-02-05 [Bulletin-CVE-2018-11945]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11945]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-6271

(json)

CVE numbers: CVE-2018-6271 [Bulletin-CVE-2018-6271]
Coordinated disclosure?: unknown
Categories: NVIDIA components
Details: NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the extra data, which may lead to denial of service or escalation of privileges. Android ID: A-80198474. [NIST-CVE-2018-6271]
Discovered by: Hongli Han (@hexb1n) and Mingjian Zhou (周明建) (@Mingjian_Zhou) of C0RE Team [Discovery-CVE-2018-6271] on: Unknown
Reported on: 2019-02-01 [Bulletin-CVE-2018-6271]
Fixed on: Unknown
Fix released on: 2019-02-05 [Bulletin-CVE-2018-6271]
Affected versions: regex:
Affected devices:
Affected manufacturers: NVIDIA [Bulletin-CVE-2018-6271]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2308

(json)

CVE numbers: CVE-2019-2308 [Bulletin-CVE-2019-2308]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details:
Discovered by: on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2308]
Fixed on: 2019-02-02 [QC-CR#2338800]
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2308]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2308]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2044

(json)

CVE numbers: CVE-2019-2044 [Bulletin-CVE-2019-2044]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-123701862 [NIST-CVE-2019-2044]
Discovered by: Cusas of L.O. Team [Discovery-CVE-2019-2044] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2044]
Fixed on: 2019-02-26 [A-123701862]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2044]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2044] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2044]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2044]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2017-8252

(json)

CVE numbers: CVE-2017-8252 [Bulletin-CVE-2017-8252]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2017-8252]
Discovered by: Adrian Tang of Columbia University (CLKSCREW paper) [Discovery-CVE-2017-8252] on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2017-8252]
Fixed on: Unknown
Fix released on: 2019-03-05 [Bulletin-CVE-2017-8252]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2017-8252]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11958

(json)

CVE numbers: CVE-2018-11958 [Bulletin-CVE-2018-11958]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016 [NIST-CVE-2018-11958]
Discovered by: on: Unknown
Reported on: 2019-03-01 [Bulletin-CVE-2018-11958]
Fixed on: Unknown
Fix released on: 2019-03-05 [Bulletin-CVE-2018-11958]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11958]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2045

(json)

CVE numbers: CVE-2019-2045 [Bulletin-CVE-2019-2045]
Coordinated disclosure?: unknown
Categories: System
Details: In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.1 Android-9 Android ID: A-117554758 [NIST-CVE-2019-2045]
Discovered by: Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2045] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2045]
Fixed on: 2019-03-05 [A-117554758]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2045]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.1, 9 [Bulletin-CVE-2019-2045] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2045]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.1, 9 [Bulletin-CVE-2019-2045]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2046

(json)

CVE numbers: CVE-2019-2046 [Bulletin-CVE-2019-2046]
Coordinated disclosure?: unknown
Categories: System
Details: In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117556220 [NIST-CVE-2019-2046]
Discovered by: Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2046] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2046]
Fixed on: 2019-03-05 [A-117556220]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2046]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2046] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2046]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2046]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2047

(json)

CVE numbers: CVE-2019-2047 [Bulletin-CVE-2019-2047]
Coordinated disclosure?: unknown
Categories: System
Details: In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117607414 [NIST-CVE-2019-2047]
Discovered by: Wei Liu (刘炜) and Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2047] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2047]
Fixed on: 2019-03-05 [A-117607414]
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2047]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2047] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2047]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2047]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2097

(json)

CVE numbers: CVE-2019-2097 [Bulletin-CVE-2019-2097]
Coordinated disclosure?: unknown
Categories: System
Details: In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117606285. [NIST-CVE-2019-2097]
Discovered by: Wei Liu (刘炜), Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2097] on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2097]
Fixed on: 2019-03-08 [A-117606285]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2097]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2097] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2097]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2097]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-10492

(json)

CVE numbers: CVE-2019-10492 [Bulletin-CVE-2019-10492]
Coordinated disclosure?: unknown
Categories: Qualcomm components
Details:
Discovered by: on: Unknown
Reported on: 2019-08-01 [Bulletin-CVE-2019-10492]
Fixed on: 2019-03-14 [QC-CR#2389432]
Fix released on: 2019-08-05 [Bulletin-CVE-2019-10492]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-10492]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-08-12

CVE-2019-2106

(json)

CVE numbers: CVE-2019-2106 [Bulletin-CVE-2019-2106]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In ihevcd_sao_shift_ctb of ihevcd_sao.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130023983. [NIST-CVE-2019-2106]
Discovered by: Kostya Serebryany of Google, using libFuzzer and AddressSanitizer [Discovery-CVE-2019-2106] on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2106]
Fixed on: 2019-03-29 [A-130023983]
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2106]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2106] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2106]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2106]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11271

(json)

CVE numbers: CVE-2018-11271 [Bulletin-CVE-2018-11271]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SM7150, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2018-11271]
Discovered by: on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-11271]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2018-11271]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11271]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-11976

(json)

CVE numbers: CVE-2018-11976 [Bulletin-CVE-2018-11976]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2018-11976]
Discovered by: NCC Group [Discovery-CVE-2018-11976] on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-11976]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2018-11976]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-11976]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-12004

(json)

CVE numbers: CVE-2018-12004 [Bulletin-CVE-2018-12004]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130 [NIST-CVE-2018-12004]
Discovered by: on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-12004]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2018-12004]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-12004]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-13886

(json)

CVE numbers: CVE-2018-13886 [Bulletin-CVE-2018-13886]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2018-13886]
Discovered by: on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-13886]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2018-13886]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13886]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-13887

(json)

CVE numbers: CVE-2018-13887 [Bulletin-CVE-2018-13887]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130 [NIST-CVE-2018-13887]
Discovered by: on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2018-13887]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2018-13887]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13887]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2094

(json)

CVE numbers: CVE-2019-2094 [Bulletin-CVE-2019-2094]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-129068792. [NIST-CVE-2019-2094]
Discovered by: Cusas of L.O. Team [Discovery-CVE-2019-2094] on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2019-2094]
Fixed on: 2019-04-01 [A-129068792]
Fix released on: 2019-06-05 [Bulletin-CVE-2019-2094]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2094] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2094]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2094]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2250

(json)

CVE numbers: CVE-2019-2250 [Bulletin-CVE-2019-2250]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130 [NIST-CVE-2019-2250]
Discovered by: on: Unknown
Reported on: 2019-04-01 [Bulletin-CVE-2019-2250]
Fixed on: Unknown
Fix released on: 2019-04-05 [Bulletin-CVE-2019-2250]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2250]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2107

(json)

CVE numbers: CVE-2019-2107 [Bulletin-CVE-2019-2107]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In ihevcd_parse_pps of ihevcd_parse_headers.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130024844. [NIST-CVE-2019-2107]
Discovered by: Kostya Serebryany of Google, using libFuzzer and AddressSanitizer [Discovery-CVE-2019-2107] on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2107]
Fixed on: 2019-04-05 [A-130024844]
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2107]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2107] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2107]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2107]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-13898

(json)

CVE numbers: CVE-2018-13898 [Bulletin-CVE-2018-13898]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2018-13898]
Discovered by: derrek (@derrekr6) [Discovery-CVE-2018-13898] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2018-13898]
Fixed on: Unknown
Fix released on: 2019-05-05 [Bulletin-CVE-2018-13898]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13898]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-5912

(json)

CVE numbers: CVE-2018-5912 [Bulletin-CVE-2018-5912]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660 [NIST-CVE-2018-5912]
Discovered by: Xiling Gong of Tencent Blade Team [Discovery-CVE-2018-5912] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2018-5912]
Fixed on: Unknown
Fix released on: 2019-05-05 [Bulletin-CVE-2018-5912]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-5912]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2255

(json)

CVE numbers: CVE-2019-2255 [Bulletin-CVE-2019-2255]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2019-2255]
Discovered by: on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2255]
Fixed on: Unknown
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2255]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2255]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2256

(json)

CVE numbers: CVE-2019-2256 [Bulletin-CVE-2019-2256]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details: An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130 [NIST-CVE-2019-2256]
Discovered by: Xiling Gong of Tencent Blade Team [Discovery-CVE-2019-2256] on: Unknown
Reported on: 2019-05-01 [Bulletin-CVE-2019-2256]
Fixed on: Unknown
Fix released on: 2019-05-05 [Bulletin-CVE-2019-2256]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2256]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-13924

(json)

CVE numbers: CVE-2018-13924 [Bulletin-CVE-2018-13924]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2018-13924]
Fixed on: Unknown
Fix released on: 2019-06-05 [Bulletin-CVE-2018-13924]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13924]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2018-13927

(json)

CVE numbers: CVE-2018-13927 [Bulletin-CVE-2018-13927]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: on: Unknown
Reported on: 2019-06-01 [Bulletin-CVE-2018-13927]
Fixed on: Unknown
Fix released on: 2019-06-05 [Bulletin-CVE-2018-13927]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2018-13927]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2130

(json)

CVE numbers: CVE-2019-2130 [Bulletin-CVE-2019-2130]
Coordinated disclosure?: unknown
Categories: System
Details:
Discovered by: Wei Liu (刘炜), Yongke Wang (王永科) (@Rudykewang) of Tencent Security Xuanwu Lab (腾讯安全玄武实验室) [Discovery-CVE-2019-2130] on: Unknown
Reported on: 2019-08-01 [Bulletin-CVE-2019-2130]
Fixed on: 2019-06-03 [A-132073833]
Fix released on: 2019-08-05 [Bulletin-CVE-2019-2130]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2130] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])|(9.[0-9].[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2130]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9 [Bulletin-CVE-2019-2130]
Submission: by: Daniel Carter, on: 2019-08-12

CVE-2019-2109

(json)

CVE numbers: CVE-2019-2109 [Bulletin-CVE-2019-2109]
Coordinated disclosure?: unknown
Categories: Media framework
Details: In MakeMPEG4VideoCodecSpecificData of AVIExtractor.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1. Android ID: A-130651570. [NIST-CVE-2019-2109]
Discovered by: on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2109]
Fixed on: Unknown
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2109]
Affected versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2019-2109] regex: (7.0.[0-9])|(7.1.1)|(7.1.2)|(8.0.[0-9])|(8.1.[0-9])
Affected devices:
Affected manufacturers: all [Bulletin-CVE-2019-2109]
Fixed versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1 [Bulletin-CVE-2019-2109]
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2254

(json)

CVE numbers: CVE-2019-2254 [Bulletin-CVE-2019-2254]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2254]
Fixed on: Unknown
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2254]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2254]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2322

(json)

CVE numbers: CVE-2019-2322 [Bulletin-CVE-2019-2322]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2322]
Fixed on: Unknown
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2322]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2322]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-2327

(json)

CVE numbers: CVE-2019-2327 [Bulletin-CVE-2019-2327]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: on: Unknown
Reported on: 2019-07-01 [Bulletin-CVE-2019-2327]
Fixed on: Unknown
Fix released on: 2019-07-05 [Bulletin-CVE-2019-2327]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-2327]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-07-24

CVE-2019-10539

(json)

CVE numbers: CVE-2019-10539 [Bulletin-CVE-2019-10539]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: Xiling Gong of Tencent Blade Team [Discovery-CVE-2019-10539] on: Unknown
Reported on: 2019-08-01 [Bulletin-CVE-2019-10539]
Fixed on: Unknown
Fix released on: 2019-08-05 [Bulletin-CVE-2019-10539]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-10539]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-08-12

CVE-2019-10540

(json)

CVE numbers: CVE-2019-10540 [Bulletin-CVE-2019-10540]
Coordinated disclosure?: unknown
Categories: Qualcomm closed-source components
Details:
Discovered by: Xiling Gong of Tencent Blade Team [Discovery-CVE-2019-10540] on: Unknown
Reported on: 2019-08-01 [Bulletin-CVE-2019-10540]
Fixed on: Unknown
Fix released on: 2019-08-05 [Bulletin-CVE-2019-10540]
Affected versions: regex:
Affected devices:
Affected manufacturers: Qualcomm [Bulletin-CVE-2019-10540]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-08-12

CVE-2019-11516

(json)

CVE numbers: CVE-2019-11516 [Bulletin-CVE-2019-11516]
Coordinated disclosure?: unknown
Categories: Broadcom components
Details:
Discovered by: on: Unknown
Reported on: 2019-08-01 [Bulletin-CVE-2019-11516]
Fixed on: Unknown
Fix released on: 2019-08-05 [Bulletin-CVE-2019-11516]
Affected versions: regex:
Affected devices:
Affected manufacturers: Broadcom [Bulletin-CVE-2019-11516]
Fixed versions:
Submission: by: Daniel Carter, on: 2019-08-12