Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Agatti Firmware · all components

Priority MEDIUM 44

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-120
Priority MEDIUM 44

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 44

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 41

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00883 Published 2020-11-02 No fix listed CWE-125
Priority LOW 33

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-11-02 No fix listed CWE-129
Priority LOW 33

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00189 Published 2020-11-02 No fix listed CWE-120
Priority LOW 33

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2020-11-02 No fix listed CWE-787
Priority LOW 33

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2020-11-02 No fix listed
Priority LOW 33

u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastruct…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2020-11-02 No fix listed CWE-120
Priority LOW 33

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2020-11-02 No fix listed
Priority LOW 30

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00141 Published 2020-11-02 No fix listed CWE-362
Open these records in search →