Browse CVEs

HIGH 8.1 CVE-2020-11141 u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer device.' in Sn… Apq8009 Firmware Mitigation only Fix from $1,9502020-11-02 HIGH 8.1 CVE-2020-11156 u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, … Qca6390 Firmware Mitigation only Fix from $1,9502020-11-02 HIGH 7.8 CVE-2020-11125 u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapd… Agatti Firmware Patch available Fix from $1,9502020-11-02 HIGH 7.8 CVE-2020-11162 u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, S… Agatti Firmware Patch available Fix from $1,9502020-11-02 HIGH 7.8 CVE-2020-11164 u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, S… Agatti Firmware Mitigation only Fix from $1,9502020-11-02 HIGH 7.5 CVE-2020-11157 u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon… Apq8053 Firmware Mitigation only Fix from $1,9502020-11-02 HIGH 8.8 CVE-2020-11114 u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a crafted Link L… Ar9344 Firmware Mitigation only Fix from $1,9502020-11-02 HIGH 7.5 CVE-2020-25858EPSS 10% The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a s… Qualcomm Mobile Access Point No fix yet Fix from $1,9502020-10-15 MEDIUM 6.7 CVE-2020-25859 The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the inp… Qcmap No fix yet Fix from $1,6002020-10-15 MEDIUM 5.4 CVE-2019-18991 A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability all… Atheros Ar9132 Firmware Mitigation only Fix from $1,6002020-09-30 CRITICAL 9.1 CVE-2020-3634 u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, S… Apq8053 Firmware Mitigation only Fix from $2,3002020-09-09 HIGH 7.8 CVE-2020-3656 Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, … Apq8009 Firmware Patch available Fix from $1,9502020-09-09 HIGH 7.1 CVE-2020-3617 u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Inform… Kamorta Firmware Mitigation only Fix from $1,9502020-09-09 MEDIUM 5.5 CVE-2020-3674 Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Nicobar Firmware Patch available Fix from $1,6002020-09-09 MEDIUM 5.5 CVE-2020-3679 u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segme… Bitra Firmware Mitigation only Fix from $1,6002020-09-09 HIGH 7.8 CVE-2020-11124 u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto,… Mdm9607 Firmware Patch available Fix from $1,9502020-09-09 HIGH 7.8 CVE-2020-11129 u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free'… Bitra Firmware Mitigation only Fix from $1,9502020-09-09 HIGH 7.5 CVE-2020-11135 u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IO… Apq8098 Firmware Mitigation only Fix from $1,9502020-09-09 CRITICAL 9.8 CVE-2020-3667 u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon … Apq8098 Firmware Mitigation only Fix from $2,3002020-09-08 CRITICAL 9.8 CVE-2020-3668 u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Sna… Ipq6018 Firmware Mitigation only Fix from $2,3002020-09-08 CRITICAL 9.8 CVE-2020-3669 u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Apq8098 Firmware Mitigation only Fix from $2,3002020-09-08 CRITICAL 9.8 CVE-2020-3675 u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdrago… Ipq5018 Firmware Mitigation only Fix from $2,3002020-09-08 HIGH 7.8 CVE-2020-3622 u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination … Apq8009 Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3624 u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3629 u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP a… Bitra Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3636 u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snapdragon Auto, Snapdragon Compu… Kamorta Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3640 u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversa… Bitra Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3646 u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon C… Bitra Firmware Patch available Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3647 u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial IOT, Sna… Mdm9607 Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2020-3648 u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon … Msm8909w Firmware Mitigation only Fix from $1,9502020-09-08