Browse CVEs

HIGH 7.8 CVE-2019-13999 u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' in Snapdra… Apq8009 Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2019-14056 u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Sna… Kamorta Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2019-14065 u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume… Apq8009 Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2019-14074 u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon … Apq8009 Firmware Mitigation only Fix from $1,9502020-09-08 HIGH 7.8 CVE-2019-14089 u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data era… Kamorta Firmware Mitigation only Fix from $1,9502020-09-08 MEDIUM 5.5 CVE-2019-14025 u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular sessio… Kamorta Firmware Mitigation only Fix from $1,6002020-09-08 HIGH 8.1 CVE-2018-13903 u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna… Apq8053 Firmware Mitigation only Fix from $1,9502020-09-08 CRITICAL 9.8 CVE-2020-3681 Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recoverable from code. Mitigation only Fix from $2,3002020-07-31 CRITICAL 9.8 CVE-2020-3688 Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Comput… Apq8009 Firmware Mitigation only Fix from $2,3002020-07-30 CRITICAL 9.8 CVE-2020-3698 Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snap… Apq8009 Firmware Patch available Fix from $2,3002020-07-30 CRITICAL 9.8 CVE-2020-3699 Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Sn… Apq8009 Firmware Patch available Fix from $2,3002020-07-30 HIGH 7.8 CVE-2020-3701 Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Sai… Saipan Firmware Mitigation only Fix from $1,9502020-07-30 HIGH 7.5 CVE-2020-3700 Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no additional execut… Apq8053 Firmware Patch available Fix from $1,9502020-07-30 CRITICAL 9.8 CVE-2020-3671 Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, … Apq8009 Firmware Mitigation only Fix from $2,3002020-07-30 HIGH 7.8 CVE-2019-10580 When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Au… Mdm9607 Firmware Patch available Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14037 Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… Apq8009 Firmware Patch available Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14093 Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity… Apq8009 Firmware Patch available Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14099 Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute,… Apq8053 Firmware Patch available Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14100 Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume… Mdm9206 Firmware Patch available Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14123 Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in… Kamorta Firmware Mitigation only Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14124 Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Sna… Kamorta Firmware Mitigation only Fix from $1,9502020-07-30 HIGH 7.8 CVE-2019-14130 Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Co… Kamorta Firmware Mitigation only Fix from $1,9502020-07-30 HIGH 7.1 CVE-2019-14101 Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in… Apq8009 Firmware Mitigation only Fix from $1,9502020-07-30 CRITICAL 9.8 CVE-2020-3628 Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in… Apq8053 Firmware No fix yet Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3660 Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3661 Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3662 Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3663 Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute,… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.1 CVE-2020-3658 Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 HIGH 7.8 CVE-2020-3635 Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8053 Firmware Mitigation only Fix from $1,9502020-06-22