Browse CVEs

CRITICAL 9.1 CVE-2020-11188 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11189 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11190 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11222 Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Apq8017 Firmware Mitigation only Fix from $2,3002021-03-17 HIGH 7.5 CVE-2020-11218 Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8017 Firmware Mitigation only Fix from $1,9502021-03-17 MEDIUM 6.4 CVE-2020-11220 While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while e… Aqt1000 Firmware Mitigation only Fix from $1,6002021-03-17 MEDIUM 5.5 CVE-2020-11186 Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto… Csrb31024 Firmware Mitigation only Fix from $1,6002021-03-17 MEDIUM 5.5 CVE-2020-11199 HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, S… Apq8009 Firmware Mitigation only Fix from $1,6002021-03-17 MEDIUM 5.5 CVE-2020-11221 Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the… Apq8009 Firmware Mitigation only Fix from $1,6002021-03-17 CRITICAL 9.1 CVE-2020-11166 Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, S… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.8 CVE-2020-11283 A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009 Mitigation only Fix from $2,3002021-02-22 HIGH 7.5 CVE-2020-11287 Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon … Aqt1000 Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11296 Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 MEDIUM 6.0 CVE-2020-3664 Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $1,6002021-02-22 CRITICAL 9.1 CVE-2020-11275 Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdra… Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 CRITICAL 9.1 CVE-2020-11276 Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA … Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 HIGH 8.8 CVE-2020-11269 Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11204 Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are re… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11223 Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11253 Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11270 Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Sna… Aqt1000 Firmware No fix yet Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11278 Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11280 Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error … Aqt1000 Firmware No fix yet Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11281 Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon … Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.4 CVE-2020-11277 Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Co… Pm3003a Firmware Mitigation only Fix from $1,9502021-02-22 CRITICAL 9.8 CVE-2020-11163 Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG serve… Apq8017 Firmware Mitigation only Fix from $2,3002021-02-22 CRITICAL 9.8 CVE-2020-11170 Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, … Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 HIGH 8.8 CVE-2020-11177 User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Aut… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11187 Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11194 Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdr… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22