Priority MEDIUM 52
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.11108 · Published 2021-09-08 · No fix listed CWE-287
Priority MEDIUM 49
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00528 · Published 2022-10-19 · No fix listed CWE-190
Priority MEDIUM 49
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00507 · Published 2022-10-19 · No fix listed CWE-129
Priority MEDIUM 49
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00497 · Published 2022-10-19 · No fix listed CWE-252
Priority MEDIUM 47
Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00256 · Published 2024-06-03 · No fix listed CWE-287
Priority MEDIUM 45
Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Sna…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01352 · Published 2019-02-25 · No fix listed CWE-787
Priority MEDIUM 45
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, S…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01252 · Published 2018-04-11 · No fix listed CWE-416
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/S…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01228 · Published 2018-04-18 · No fix listed CWE-74
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01281 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM96…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01281 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio buffer.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01354 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader find_ep(…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01377 · Published 2018-04-18 · No fix listed CWE-476
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01281 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 40…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01281 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrus…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01329 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 45
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01281 · Published 2018-04-18 · No fix listed CWE-119
Priority MEDIUM 44
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00869 · Published 2021-11-12 · No fix listed CWE-787
Priority MEDIUM 44
Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00808 · Published 2021-09-08 · No fix listed CWE-120
Priority MEDIUM 44
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2021-05-07 · No fix listed CWE-190
Priority MEDIUM 44
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00834 · Published 2021-02-22 · No fix listed CWE-120
Priority MEDIUM 44
u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-09-08 · No fix listed CWE-908
Priority MEDIUM 44
Out of bound write can happen due to lack of check of array index value while calculating it.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-04-16 · No fix listed CWE-787
Priority MEDIUM 44
Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-03-05 · No fix listed CWE-129
Priority MEDIUM 44
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-04-16 · No fix listed CWE-787
Priority MEDIUM 44
Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-03-05 · No fix listed CWE-787
Load more