Priority CRITICAL 96KEV
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00394 · Published 2022-06-14 · No fix listed CWE-416
Priority CRITICAL 96KEV
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.01543 · Published 2021-05-07 · No fix listed CWE-416
Priority CRITICAL 93KEV
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01529 · Published 2021-06-09 · No fix listed CWE-20
Priority CRITICAL 85KEV
Improper handling of address deregistration on failure can lead to new GPU address allocation failure.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0052 · Published 2021-05-07 · No fix listed
Priority MEDIUM 64
u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdrago…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.26632 · Published 2020-11-02 · No fix listed CWE-120
Priority MEDIUM 57
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.13186 · Published 2021-09-08 · No fix listed CWE-287
Priority MEDIUM 52
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.11108 · Published 2021-09-08 · No fix listed CWE-287
Priority MEDIUM 49
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00507 · Published 2022-10-19 · No fix listed CWE-129
Priority MEDIUM 49
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00497 · Published 2022-10-19 · No fix listed CWE-252
Priority MEDIUM 48
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00389 · Published 2022-10-19 · No fix listed CWE-120
Priority MEDIUM 46
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00559 · Published 2022-10-19 · No fix listed CWE-125
Priority MEDIUM 46
u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02277 · Published 2020-11-02 · No fix listed CWE-787
Priority MEDIUM 44
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00917 · Published 2022-06-14 · No fix listed CWE-190
Priority MEDIUM 44
Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2021-09-08 · No fix listed CWE-120
Priority MEDIUM 44
Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00937 · Published 2021-07-13 · No fix listed CWE-129
Priority MEDIUM 44
Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01093 · Published 2021-03-17 · No fix listed CWE-120
Priority MEDIUM 44
Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00937 · Published 2021-06-09 · No fix listed CWE-129
Priority MEDIUM 44
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2021-05-07 · No fix listed CWE-190
Priority MEDIUM 44
Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdr…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00894 · Published 2021-02-22 · No fix listed CWE-416
Priority MEDIUM 44
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00911 · Published 2021-03-17 · No fix listed CWE-129
Priority MEDIUM 44
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-11-12 · No fix listed CWE-119
Priority MEDIUM 44
u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-11-12 · No fix listed CWE-125
Priority MEDIUM 44
Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01099 · Published 2021-03-17 · No fix listed CWE-787
Priority MEDIUM 44
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00834 · Published 2021-02-22 · No fix listed CWE-120
Priority MEDIUM 44
u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-11-12 · No fix listed CWE-476
Load more