Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

38 records in Bitra Firmware · all components

Priority MEDIUM 44

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon C…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-09-08 No fix listed CWE-120
Priority MEDIUM 44

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 44

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 43

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow issue (CVE-2019-1633…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00711 Published 2020-11-02 No fix listed CWE-125
Priority LOW 33

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-11-02 No fix listed CWE-129
Priority LOW 33

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00189 Published 2020-11-02 No fix listed CWE-120
Priority LOW 33

u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS60…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00222 Published 2020-09-09 No fix listed CWE-416
Priority LOW 33

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00203 Published 2020-09-08 No fix listed CWE-129
Priority LOW 33

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2020-11-02 No fix listed CWE-787
Priority LOW 33

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-09-08 No fix listed CWE-416
Priority LOW 33

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00228 Published 2020-11-02 No fix listed CWE-119
Priority LOW 33

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2020-11-02 No fix listed
Priority LOW 33

u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2020-09-08 No fix listed CWE-120
Priority LOW 33

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wrong input' in Snapdragon Compute, Snapdrag…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2020-09-08 No fix listed CWE-131
Priority LOW 33

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2020-11-02 No fix listed
Priority LOW 33

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP attributes' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2020-09-08 No fix listed CWE-120
Priority LOW 33

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon Auto, Snapdragon Comp…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-09-08 No fix listed CWE-787
Priority LOW 33

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault exception in rmnet driver'…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00203 Published 2020-09-08 No fix listed CWE-416
Priority LOW 33

u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2020-09-08 No fix listed CWE-190
Load more
Open these records in search →