Browse CVEs

HIGH 7.8 CVE-2020-3642 Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the obje… Kamorta Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2020-3665 A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Sn… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2020-3676 Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consume… Apq8096au Firmware Mitigation only Fix from $1,9502020-06-22 CRITICAL 9.8 CVE-2019-14062 Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdr… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2019-14073 Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2019-14080 Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, S… Apq8053 Firmware Mitigation only Fix from $2,3002020-06-22 CRITICAL 9.8 CVE-2020-3614 Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-22 HIGH 7.8 CVE-2019-14047 While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Sn… Apq8053 Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2019-14076 Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2019-14091 Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume… Mdm9607 Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2019-14094 Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2020-3613 Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Mu… Sm8150 Firmware Mitigation only Fix from $1,9502020-06-22 HIGH 7.8 CVE-2020-3626 Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Apq8053 Firmware Mitigation only Fix from $1,9502020-06-22 MEDIUM 5.5 CVE-2019-10626 Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdr… Apq8009 Firmware Mitigation only Fix from $1,6002020-06-22 MEDIUM 5.5 CVE-2019-14092 System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in M… Mdm9206 Firmware Mitigation only Fix from $1,6002020-06-22 HIGH 7.8 CVE-2019-10597 kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… Ipq6018 Firmware Mitigation only Fix from $1,9502020-06-22 CRITICAL 9.8 CVE-2020-3641 Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute,… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-02 HIGH 7.5 CVE-2020-3645 Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapd… Ipq6018 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.0 CVE-2020-3680 A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… Apq8009 Firmware Patch available Fix from $1,9502020-06-02 CRITICAL 9.8 CVE-2020-3615 Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper en… Apq8009 Firmware Patch available Fix from $2,3002020-06-02 CRITICAL 9.8 CVE-2020-3633 Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $2,3002020-06-02 HIGH 7.8 CVE-2020-3610 Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for… Apq8009 Firmware Patch available Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3616 Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, … Apq8017 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3618 NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure… Qca8081 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3623 kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130 Sm8250 Firmware No fix yet Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3625 When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdr… Sm8250 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2020-3630 Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… Apq8009 Firmware Patch available Fix from $1,9502020-06-02 HIGH 7.8 CVE-2019-14066 Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID stat… Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2019-14077 Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Com… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.8 CVE-2019-14078 Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon… Apq8009 Firmware Mitigation only Fix from $1,9502020-06-02