Browse CVEs

HIGH 7.8 CVE-2020-11271 Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Aqt1000 Firmware Patch available Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11270 Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Sna… Aqt1000 Firmware No fix yet Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11278 Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11280 Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error … Aqt1000 Firmware No fix yet Fix from $1,9502021-02-22 HIGH 7.5 CVE-2020-11281 Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon … Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.4 CVE-2020-11277 Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Co… Pm3003a Firmware Mitigation only Fix from $1,9502021-02-22 CRITICAL 9.8 CVE-2020-11163 Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG serve… Apq8017 Firmware Mitigation only Fix from $2,3002021-02-22 CRITICAL 9.8 CVE-2020-11170 Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, … Apq8009 Firmware Mitigation only Fix from $2,3002021-02-22 HIGH 8.8 CVE-2020-11177 User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Aut… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11187 Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11194 Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdr… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11195 Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.1 CVE-2020-11203 Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Co… Apq8009w Firmware Mitigation only Fix from $1,9502021-02-22 MEDIUM 6.7 CVE-2020-11147 Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute,… Aqt1000 Firmware Mitigation only Fix from $1,6002021-02-22 MEDIUM 6.7 CVE-2020-11198 Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdra… Aqt1000 Firmware Mitigation only Fix from $1,6002021-02-22 CRITICAL 9.8 CVE-2020-3686 Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of arr… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-3691 Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snap… Apq8009 Mitigation only Fix from $2,3002021-01-21 MEDIUM 5.5 CVE-2020-3687 Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue. Qualcomm No fix yet Fix from $1,6002021-01-21 CRITICAL 9.8 CVE-2020-11167 Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon … Apq8009w Patch available Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11197 Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip with inval… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11212 Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11213 Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon C… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11216 Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdrago… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11225 Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdr… Apq8064au Patch available Fix from $2,3002021-01-21 CRITICAL 9.1 CVE-2020-11215 An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, … Aqt1000 Mitigation only Fix from $2,3002021-01-21 HIGH 7.8 CVE-2020-11180 Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compu… Aqt1000 Mitigation only Fix from $1,9502021-01-21 HIGH 7.8 CVE-2020-11181 Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Co… Pm3003a Firmware Mitigation only Fix from $1,9502021-01-21 HIGH 7.8 CVE-2020-11185 Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdrago… Ar9380 Patch available Fix from $1,9502021-01-21 HIGH 7.8 CVE-2020-11217 A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connect… Pm3003a Patch available Fix from $1,9502021-01-21 HIGH 7.5 CVE-2020-11200 Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute… Apq8053 Mitigation only Fix from $1,9502021-01-21