Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
198 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.5) | 0.21% | — | Qualcomm Msm8996au FirmwareQualcomm Qcs605 FirmwareQualcomm SD 410 FirmwareQualcomm SD 412 Firmware+26 | 25/2/2019 | 17/6/2026 | Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon… | |
| Modificada | Crítica (9.8) | 1.4% | — | Qualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9615 Firmware+46 | 25/2/2019 | 17/6/2026 | Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon… | |
| Modificada | Alta (7.8) | 0.25% | — | Qualcomm Ipq8074 FirmwareQualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 Firmware+41 | 25/2/2019 | 17/6/2026 | Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon… | |
| Modificada | Media (5.3) | 0.82% | — | Qualcomm Mdm9607 FirmwareQualcomm Mdm9650 FirmwareQualcomm Mdm9655 FirmwareQualcomm Msm8996au Firmware+24 | 25/2/2019 | 17/6/2026 | Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9607,… | |
| Modificada | Crítica (9.1) | 1.1% | — | Qualcomm Mdm9650 FirmwareQualcomm Mdm9655 FirmwareQualcomm Msm8996au FirmwareQualcomm Qcs605 Firmware+16 | 25/2/2019 | 17/6/2026 | Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650, MDM9655, MSM8996AU, QCS605, SD 410/12, SD… | |
| Modificada | Alta (7.8) | 0.24% | — | Qualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9650 Firmware+36 | 25/2/2019 | 17/6/2026 | Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607,… | |
| Modificada | Media (5.5) | 0.23% | — | Qualcomm Ipq8074 FirmwareQualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 Firmware+38 | 25/2/2019 | 17/6/2026 | Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired… | |
| Modificada | Media (5.5) | 0.23% | — | Qualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9650 Firmware+36 | 25/2/2019 | 17/6/2026 | Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in… | |
| Modificada | Media (5.5) | 0.23% | — | Qualcomm Ipq8074 FirmwareQualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 Firmware+42 | 25/2/2019 | 17/6/2026 | Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,… | |
| Modificada | Alta (7.8) | 0.21% | — | Qualcomm Ipq8074 FirmwareQualcomm Mdm9150 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9607 Firmware+38 | 25/2/2019 | 17/6/2026 | Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… | |
| Modificada | Alta (7.8) | 0.23% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9635m FirmwareQualcomm Mdm9650 Firmware+28 | 11/2/2019 | 17/6/2026 | There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD… | |
| Modificada | Alta (7.8) | 0.19% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9640 FirmwareQualcomm Mdm9650 Firmware+31 | 11/2/2019 | 17/6/2026 | While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD 210/SD 212/SD 205,… | |
| Modificada | Crítica (9.8) | 1.3% | — | Qualcomm Mdm9607 FirmwareQualcomm Mdm9640 FirmwareQualcomm Mdm9650 FirmwareQualcomm Msm8909w Firmware+17 | 18/1/2019 | 17/6/2026 | Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130 | |
| Modificada | Alta (7.8) | 0.26% | — | Qualcomm Msm8996au FirmwareQualcomm SD 425 FirmwareQualcomm SD 430 FirmwareQualcomm SD 450 Firmware+12 | 18/1/2019 | 17/6/2026 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 425, SD 430, SD 450, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX24, SXR1130 | |
| Modificada | Alta (7.8) | 0.26% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9635m FirmwareQualcomm Mdm9650 Firmware+34 | 18/1/2019 | 17/6/2026 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD… | |
| Modificada | Media (5.5) | 0.20% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9650 FirmwareQualcomm Msm8996au Firmware+20 | 18/1/2019 | 17/6/2026 | Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670,… | |
| Modificada | Alta (7.8) | 0.23% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9650 FirmwareQualcomm Mdm9655 Firmware+16 | 18/1/2019 | 17/6/2026 | Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 712 / SD 710 / SD… | |
| Modificada | Alta (8.8) | 0.51% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9615 FirmwareQualcomm Mdm9625 Firmware+42 | 18/1/2019 | 17/6/2026 | Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427,… | |
| Modificada | Media (5.5) | 0.23% | — | Qualcomm Mdm9607 FirmwareQualcomm Mdm9635m FirmwareQualcomm Mdm9640 FirmwareQualcomm Mdm9645 Firmware+24 | 18/1/2019 | 17/6/2026 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670,… | |
| Modificada | Alta (7.8) | 0.24% | — | Qualcomm Mdm9615 FirmwareQualcomm Mdm9625 FirmwareQualcomm Mdm9635m FirmwareQualcomm Mdm9640 Firmware+33 | 3/1/2019 | 17/6/2026 | Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD… | |
| Modificada | Media (5.5) | 0.23% | — | Qualcomm Mdm9607 FirmwareQualcomm Mdm9635m FirmwareQualcomm Mdm9640 FirmwareQualcomm Mdm9645 Firmware+24 | 3/1/2019 | 17/6/2026 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670,… | |
| Modificada | Media (5.5) | 0.21% | — | Qualcomm Mdm9206 FirmwareQualcomm Mdm9607 FirmwareQualcomm Mdm9615 FirmwareQualcomm Mdm9635m Firmware+31 | 3/1/2019 | 17/6/2026 | Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD… | |
| Modificada | Alta (7.8) | 0.22% | — | Qualcomm Msm8996au FirmwareQualcomm SD 410 FirmwareQualcomm SD 412 FirmwareQualcomm SD 425 Firmware+28 | 3/1/2019 | 17/6/2026 | QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD… |