Browse CVEs

HIGH 7.8 CVE-2019-14087 Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mob… Msm8909w Firmware Patch available Fix from $1,9502020-06-02 MEDIUM 5.5 CVE-2019-14067 Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdra… Apq8009 Firmware Mitigation only Fix from $1,6002020-06-02 HIGH 7.8 CVE-2019-14054 Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdrago… Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14038 Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon A… Apq8009 Firmware Patch available Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14039 Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, S… Apq8053 Firmware Patch available Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14042 Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Snapdragon … Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14043 Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdra… Kamorta Firmware Mitigation only Fix from $1,9502020-06-02 HIGH 7.1 CVE-2019-14053 When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value t… Apq8009 Firmware Patch available Fix from $1,9502020-06-02 CRITICAL 9.8 CVE-2019-14110 Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in c… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14111 Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele… Ipq6018 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14112 Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8098 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14113 Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14114 Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compu… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14127 Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14131 Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdr… Apq8053 Firmware Patch available Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14132 Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer I… Qcs605 Firmware Patch available Fix from $2,3002020-04-16 CRITICAL 9.8 CVE-2019-14134 Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdra… Ipq8074 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2020-3652 Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variab… Msm8998 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2020-3653 Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, S… Msm8998 Firmware Mitigation only Fix from $2,3002020-04-16 HIGH 7.8 CVE-2019-14116 Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash du… Ipq6018 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14122 Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snap… Saipan Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14135 Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8009 Firmware Mitigation only Fix from $1,9502020-04-16 HIGH 7.5 CVE-2020-3651 Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdrag… Apq8009 Firmware Patch available Fix from $1,9502020-04-16 CRITICAL 9.1 CVE-2019-14011 Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer mo… Apq8009 Firmware No fix yet Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-14019 Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej… Apq8009 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-14020 Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_in… Apq8053 Firmware Mitigation only Fix from $2,3002020-04-16 CRITICAL 9.1 CVE-2019-14033 Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdra… Apq8053 Firmware No fix yet Fix from $2,3002020-04-16 HIGH 7.8 CVE-2019-10624 While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 data type… Apq8096au Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14001 Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra… Apq8009 Firmware Patch available Fix from $1,9502020-04-16 HIGH 7.8 CVE-2019-14009 Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Snapdragon A… Apq8009 Firmware Mitigation only Fix from $1,9502020-04-16