Browse CVEs

MEDIUM 5.5 CVE-2019-10626 Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdr… Apq8009 Firmware Mitigation only Fix from $1,6002020-06-22 MEDIUM 5.5 CVE-2019-14092 System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in M… Mdm9206 Firmware Mitigation only Fix from $1,6002020-06-22 HIGH 7.8 CVE-2019-10597 kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… Ipq6018 Firmware Mitigation only Fix from $1,9502020-06-22 CRITICAL 9.8 CVE-2020-3641 Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute,… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-02 HIGH 7.5 CVE-2020-3645 Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapd… Ipq6018 Firmware Mitigation only Fix from $1,9502020-06-02 CRITICAL 9.8 CVE-2020-3633 Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-02 HIGH 7.8 CVE-2020-3616 Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, … Apq8017 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3618 NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure… Qca8081 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3623 kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130 Sm8250 Firmware No fix yet Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3625 When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdr… Sm8250 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2019-14066 Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID stat… Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2019-14077 Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2019-14078 Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-02 MEDIUM 5.5 CVE-2019-14067 Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdra… Apq8009 Firmware Mitigation only Fix from $1,6002020-06-02 HIGH 7.8 CVE-2019-14054 Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdrago… Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14042 Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Snapdragon … Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14043 Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdra… Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 CRITICAL 9.8 CVE-2019-14110 Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in c… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14111 Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele… Ipq6018 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14112 Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8098 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14113 Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14114 Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14127 Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14134 Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdra… Ipq8074 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2020-3652 Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variab… Msm8998 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2020-3653 Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, S… Msm8998 Firmware Mitigation only Fix from $2,3002020-04-16 HIGH 7.8 CVE-2019-14116 Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash du… Ipq6018 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14135 Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8009 Firmware Mitigation only Fix from $1,9502020-04-16 CRITICAL 9.1 CVE-2019-14011 Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer mo… Apq8009 Firmware No fix yet Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-14019 Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16