Priority MEDIUM 44
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, S…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2019-11-06 · No fix listed CWE-787
Priority MEDIUM 44
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Io…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01169 · Published 2019-11-06 · No fix listed CWE-190
Priority MEDIUM 44
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2019-11-06 · No fix listed CWE-119
Priority MEDIUM 43
Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00711 · Published 2019-11-06 · No fix listed CWE-125
Priority MEDIUM 44
Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2019-11-06 · No fix listed CWE-119
Priority MEDIUM 44
Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01084 · Published 2019-11-06 · No fix listed CWE-476
Priority MEDIUM 44
Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00907 · Published 2019-11-06 · No fix listed CWE-129
Priority MEDIUM 43
While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdrago…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00715 · Published 2019-11-06 · No fix listed CWE-120
Priority LOW 34
Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mo…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00809 · Published 2019-11-06 · No fix listed CWE-476
Priority LOW 33
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon I…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2019-09-30 · No fix listed CWE-120
Priority LOW 33
Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2019-09-30 · No fix listed CWE-125
Priority LOW 33
While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space which could be invalid and thus leads to an undesired behaviour in Snapdragon Auto…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2019-09-30 · No fix listed CWE-20
Priority LOW 34
Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00814 · Published 2019-09-30 · No fix listed CWE-476
Priority LOW 34
Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdra…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00817 · Published 2019-07-25 · No fix listed CWE-476
Priority LOW 34
Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mo…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2019-07-25 · No fix listed CWE-119
Priority MEDIUM 44
Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon V…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0093 · Published 2019-07-25 · No fix listed CWE-119
Priority MEDIUM 44
Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon M…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00903 · Published 2019-07-25 · No fix listed CWE-119
Priority LOW 33
When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00197 · Published 2019-07-25 · No fix listed CWE-119
Priority MEDIUM 45
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01621 · Published 2019-07-25 · No fix listed CWE-125
Priority LOW 33
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00198 · Published 2019-07-25 · No fix listed CWE-787
Priority MEDIUM 43
Buffer over-read can occur while parsing an ogg file with a corrupted comment block.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00733 · Published 2019-07-25 · No fix listed CWE-125
Priority LOW 24
While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00179 · Published 2019-07-25 · No fix listed CWE-755
Priority MEDIUM 44
Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00815 · Published 2019-06-14 · No fix listed CWE-125
Priority MEDIUM 44
Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00988 · Published 2019-05-24 · No fix listed CWE-191
Priority MEDIUM 44
Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00988 · Published 2019-05-24 · No fix listed CWE-191
Load more