Browse CVEs

HIGH 7.0 CVE-2020-11290 Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Compute, Sna… Apq8009 Firmware Mitigation only Fix from $1,9502021-03-17 MEDIUM 6.8 CVE-2020-11305 Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &… Apq8009 Firmware Patch available Fix from $1,6002021-03-17 MEDIUM 6.8 CVE-2020-11308 Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon … Apq8009 Firmware Patch available Fix from $1,6002021-03-17 MEDIUM 6.4 CVE-2020-11230 Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user l… Aqt1000 Firmware Patch available Fix from $1,6002021-03-17 CRITICAL 9.8 CVE-2020-11192 Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11171 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11188 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11189 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11190 Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Sn… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.1 CVE-2020-11222 Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Apq8017 Firmware Mitigation only Fix from $2,3002021-03-17 HIGH 7.5 CVE-2020-11218 Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8017 Firmware Mitigation only Fix from $1,9502021-03-17 MEDIUM 6.4 CVE-2020-11220 While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while e… Aqt1000 Firmware Mitigation only Fix from $1,6002021-03-17 MEDIUM 5.5 CVE-2020-11186 Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto… Csrb31024 Firmware Mitigation only Fix from $1,6002021-03-17 MEDIUM 5.5 CVE-2020-11199 HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, S… Apq8009 Firmware Mitigation only Fix from $1,6002021-03-17 MEDIUM 5.5 CVE-2020-11221 Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the… Apq8009 Firmware Mitigation only Fix from $1,6002021-03-17 CRITICAL 9.1 CVE-2020-11166 Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, S… Apq8009 Firmware Mitigation only Fix from $2,3002021-03-17 CRITICAL 9.8 CVE-2020-11283 A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009 Mitigation only Fix from $2,3002021-02-22 HIGH 7.8 CVE-2020-11282 Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user … Apq8009 Patch available Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11287 Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon … Aqt1000 Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11296 Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11297 Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdragon Compute… Apq8096au Firmware Patch available Fix from $1,9502021-02-22 MEDIUM 6.8 CVE-2020-11286 An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like devi… Apq8009 Patch available Fix from $1,6002021-02-22 MEDIUM 6.0 CVE-2020-3664 Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $1,6002021-02-22 CRITICAL 9.8 CVE-2020-11272 Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to … Apq8009 Firmware Patch available Fix from $2,3002021-02-22 CRITICAL 9.1 CVE-2020-11275 Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdra… Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 CRITICAL 9.1 CVE-2020-11276 Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA … Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 HIGH 8.8 CVE-2020-11269 Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11204 Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are re… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11223 Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11253 Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22