Priority MEDIUM 44
u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon C…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-09-08 · No fix listed CWE-120
Priority MEDIUM 44
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-11-02 · No fix listed CWE-120
Priority MEDIUM 44
Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00879 · Published 2020-07-30 · No fix listed CWE-120
Priority MEDIUM 44
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Con…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01066 · Published 2020-09-08 · No fix listed CWE-191
Priority MEDIUM 44
u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01071 · Published 2020-11-02 · No fix listed CWE-129
Priority MEDIUM 44
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon C…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01111 · Published 2020-09-08 · No fix listed CWE-119
Priority MEDIUM 44
u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01052 · Published 2020-09-08 · No fix listed CWE-120
Priority MEDIUM 44
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01071 · Published 2020-09-08 · No fix listed CWE-120
Priority MEDIUM 44
Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00915 · Published 2020-06-22 · No fix listed CWE-787
Priority MEDIUM 44
Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-06-22 · No fix listed CWE-120
Priority MEDIUM 44
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-11-02 · No fix listed CWE-129
Priority MEDIUM 44
Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01084 · Published 2020-06-02 · No fix listed CWE-190
Priority MEDIUM 44
Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01141 · Published 2020-06-02 · No fix listed CWE-129
Priority MEDIUM 44
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-06-22 · No fix listed CWE-120
Priority MEDIUM 43
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow issue (CVE-2019-1633…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00711 · Published 2020-11-02 · No fix listed CWE-125
Priority MEDIUM 43
Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00711 · Published 2020-06-22 · No fix listed CWE-129
Priority MEDIUM 43
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard feedback messages in Snapdragon Auto, Snapd…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00707 · Published 2020-06-22 · No fix listed CWE-787
Priority MEDIUM 41
u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00883 · Published 2020-11-02 · No fix listed CWE-125
Priority MEDIUM 41
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00946 · Published 2020-06-22 · No fix listed CWE-125
Priority MEDIUM 41
u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01057 · Published 2020-09-09 · No fix listed CWE-191
Priority LOW 34
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, MSM8953, Nicobar, QC…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00688 · Published 2020-09-09 · No fix listed CWE-617
Priority LOW 34
u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2020-09-08 · No fix listed CWE-20
Priority LOW 34
u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdrag…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2020-09-08 · No fix listed CWE-125
Priority LOW 34
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This CVE is equivalent to InvalidConnectionRequ…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00532 · Published 2020-11-02 · No fix listed CWE-667
Priority LOW 34
Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapd…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00658 · Published 2020-06-02 · No fix listed CWE-617
Load more