Priority LOW 32
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon…
CVSS 3.1HIGH 7.5· Physical · No auth · No interaction · EPSS 0.00206 · Published 2022-06-14 · No fix listed CWE-120
Priority LOW 37
Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, AP…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01472 · Published 2020-11-12 · No fix listed CWE-120
Priority LOW 38
Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01819 · Published 2020-11-12 · No fix listed
Priority MEDIUM 44
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-11-12 · No fix listed CWE-119
Priority MEDIUM 44
u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2020-11-12 · No fix listed CWE-125
Priority LOW 30
u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00186 · Published 2020-11-12 · No fix listed CWE-125
Priority LOW 24
u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper ope…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2020-11-12 · No fix listed
Priority LOW 33
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0022 · Published 2020-11-02 · No fix listed
Priority MEDIUM 41
u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00883 · Published 2020-11-02 · No fix listed CWE-125
Priority MEDIUM 44
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00902 · Published 2020-11-02 · No fix listed CWE-129
Priority MEDIUM 41
u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01057 · Published 2020-09-09 · No fix listed CWE-191
Priority MEDIUM 44
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon C…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01111 · Published 2020-09-08 · No fix listed CWE-119
Priority MEDIUM 44
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01071 · Published 2020-09-08 · No fix listed CWE-120
Priority LOW 33
u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00212 · Published 2020-09-08 · No fix listed CWE-787
Priority LOW 24
u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00212 · Published 2020-09-08 · No fix listed CWE-200
Priority LOW 24
u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00191 · Published 2020-09-08 · No fix listed CWE-200
Priority LOW 33
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00189 · Published 2020-09-08 · No fix listed CWE-190
Priority LOW 33
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon Auto, Snapdragon Comp…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2020-09-08 · No fix listed CWE-787
Priority LOW 24
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdra…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0022 · Published 2020-09-08 · No fix listed CWE-20
Priority LOW 24
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Auto, Snapdragon Comput…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00187 · Published 2020-09-08 · No fix listed CWE-190
Priority LOW 30
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2020-09-08 · No fix listed CWE-367
Priority LOW 33
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infr…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00213 · Published 2020-09-08 · No fix listed
Priority LOW 33
u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630,…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2020-09-08 · No fix listed CWE-120
Priority LOW 33
u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00203 · Published 2020-09-08 · No fix listed CWE-129
Priority LOW 33
u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2020-09-08 · No fix listed CWE-416
Load more