Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

169 records

Priority LOW 32

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon…

CVSS 3.1HIGH 7.5 Physical No auth No interaction EPSS 0.00206 Published 2022-06-14 No fix listed CWE-120
Priority LOW 37

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, AP…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01472 Published 2020-11-12 No fix listed CWE-120
Priority MEDIUM 44

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-12 No fix listed CWE-119
Priority MEDIUM 44

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-11-12 No fix listed CWE-125
Priority LOW 30

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00186 Published 2020-11-12 No fix listed CWE-125
Priority LOW 24

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper ope…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2020-11-12 No fix listed
Priority MEDIUM 41

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00883 Published 2020-11-02 No fix listed CWE-125
Priority MEDIUM 44

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 41

u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01057 Published 2020-09-09 No fix listed CWE-191
Priority MEDIUM 44

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon C…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2020-09-08 No fix listed CWE-119
Priority MEDIUM 44

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2020-09-08 No fix listed CWE-120
Priority LOW 33

u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2020-09-08 No fix listed CWE-787
Priority LOW 24

u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2020-09-08 No fix listed CWE-200
Priority LOW 24

u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00191 Published 2020-09-08 No fix listed CWE-200
Priority LOW 33

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00189 Published 2020-09-08 No fix listed CWE-190
Priority LOW 33

u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon Auto, Snapdragon Comp…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-09-08 No fix listed CWE-787
Priority LOW 24

u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdra…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0022 Published 2020-09-08 No fix listed CWE-20
Priority LOW 24

u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Auto, Snapdragon Comput…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00187 Published 2020-09-08 No fix listed CWE-190
Priority LOW 30

u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00161 Published 2020-09-08 No fix listed CWE-367
Priority LOW 33

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infr…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00213 Published 2020-09-08 No fix listed
Priority LOW 33

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630,…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-09-08 No fix listed CWE-120
Priority LOW 33

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00203 Published 2020-09-08 No fix listed CWE-129
Priority LOW 33

u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2020-09-08 No fix listed CWE-416
Load more