Priority CRITICAL 96KEV
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd…
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00394 · Published 2022-06-14 · No fix listed CWE-416
Priority CRITICAL 85KEV
Improper handling of address deregistration on failure can lead to new GPU address allocation failure.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0052 · Published 2021-05-07 · No fix listed
Priority MEDIUM 64
u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdrago…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.26632 · Published 2020-11-02 · No fix listed CWE-120
Priority MEDIUM 52
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.11108 · Published 2021-09-08 · No fix listed CWE-287
Priority MEDIUM 49
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00507 · Published 2022-10-19 · No fix listed CWE-129
Priority MEDIUM 49
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04018 · Published 2022-01-03 · No fix listed CWE-120
Priority MEDIUM 48
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00326 · Published 2023-03-07 · No fix listed CWE-415
Priority MEDIUM 48
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00389 · Published 2022-10-19 · No fix listed CWE-120
Priority MEDIUM 45
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01621 · Published 2019-07-25 · No fix listed CWE-125
Priority MEDIUM 45
Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Sna…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01352 · Published 2019-02-25 · No fix listed CWE-787
Priority MEDIUM 44
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00917 · Published 2022-06-14 · No fix listed CWE-190
Priority MEDIUM 44
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0084 · Published 2022-06-14 · No fix listed CWE-120
Priority MEDIUM 44
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00869 · Published 2021-11-12 · No fix listed CWE-787
Priority MEDIUM 44
Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2021-09-08 · No fix listed CWE-120
Priority MEDIUM 44
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2021-05-07 · No fix listed CWE-190
Priority MEDIUM 44
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00911 · Published 2021-03-17 · No fix listed CWE-129
Priority MEDIUM 44
Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdrago…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00884 · Published 2020-07-30 · No fix listed CWE-20
Priority MEDIUM 44
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-06-22 · No fix listed CWE-120
Priority MEDIUM 44
u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-09-08 · No fix listed CWE-908
Priority MEDIUM 44
Out of bound write can happen due to lack of check of array index value while calculating it.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-04-16 · No fix listed CWE-787
Priority MEDIUM 44
Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-03-05 · No fix listed CWE-129
Priority MEDIUM 44
Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-03-05 · No fix listed CWE-120
Priority MEDIUM 44
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-04-16 · No fix listed CWE-787
Priority MEDIUM 44
Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-03-05 · No fix listed CWE-787
Priority MEDIUM 44
Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-03-05 · No fix listed CWE-120
Load more