Browse CVEs

HIGH 7.5 CVE-2020-11214 Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable sc… Aqt1000 Mitigation only Fix from $1,9502021-01-21 HIGH 7.5 CVE-2020-3685 Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute,… Apq8009 Mitigation only Fix from $1,9502021-01-21 HIGH 7.0 CVE-2020-11179 Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdr… Apq8009 Mitigation only Fix from $1,9502021-01-21 MEDIUM 6.7 CVE-2020-11183 A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in Snapdrago… Apq8009 Patch available Fix from $1,6002021-01-21 CRITICAL 9.8 CVE-2020-11136 Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Aut… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11137 Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible devi… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11138 Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdra… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11140 Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdr… Apq8017 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.8 CVE-2020-11143 Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Aut… Apq8009 Mitigation only Fix from $2,3002021-01-21 CRITICAL 9.1 CVE-2020-11144 Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snap… Apq8009 Mitigation only Fix from $2,3002021-01-21 HIGH 7.8 CVE-2020-11146 Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snap… Apq8076 Patch available Fix from $1,9502021-01-21 HIGH 7.5 CVE-2020-11139 Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon… Apq8017 Mitigation only Fix from $1,9502021-01-21 HIGH 7.5 CVE-2020-11145 Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon A… Apq8009 Mitigation only Fix from $1,9502021-01-21 MEDIUM 6.7 CVE-2020-11148 Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and … Apq8017 Mitigation only Fix from $1,6002021-01-21 MEDIUM 6.7 CVE-2020-11149 Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… Apq8053 Patch available Fix from $1,6002021-01-21 MEDIUM 6.7 CVE-2020-11150 Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Sn… Aqt1000 Patch available Fix from $1,6002021-01-21 MEDIUM 6.4 CVE-2020-11151 Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snap… Pm3003a Patch available Fix from $1,6002021-01-21 MEDIUM 6.4 CVE-2020-11152 Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdrag… Apq8009w Patch available Fix from $1,6002021-01-21 HIGH 7.5 CVE-2020-11119 Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,9502021-01-21 CRITICAL 9.8 CVE-2020-3639 u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Sna… Apq8009 Firmware Mitigation only Fix from $2,3002020-11-12 HIGH 7.8 CVE-2020-11206 Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon … Apq8098 Firmware No fix yet Fix from $1,9502020-11-12 HIGH 7.8 CVE-2020-11207 Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8052 Firmware No fix yet Fix from $1,9502020-11-12 HIGH 7.8 CVE-2020-11208 Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821,… Sd820 Firmware No fix yet Fix from $1,9502020-11-12 HIGH 7.8 CVE-2020-3632 u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7… Qsm8350 Firmware Mitigation only Fix from $1,9502020-11-12 MEDIUM 5.5 CVE-2020-11209 Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855… Sd820 Firmware No fix yet Fix from $1,6002020-11-12 CRITICAL 9.8 CVE-2020-11168 u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto… Apq8009w Firmware Mitigation only Fix from $2,3002020-11-12 CRITICAL 9.8 CVE-2020-11184 u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdrago… Qcm4290 Firmware Mitigation only Fix from $2,3002020-11-12 CRITICAL 9.8 CVE-2020-11193 u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Mitigation only Fix from $2,3002020-11-12 CRITICAL 9.8 CVE-2020-11196 u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $2,3002020-11-12 HIGH 7.8 CVE-2020-11127 u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security meta… Mdm9205 Firmware Mitigation only Fix from $1,9502020-11-12