Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

81 records

Priority MEDIUM 44

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-787
Priority MEDIUM 44

Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Io…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01169 Published 2019-11-06 No fix listed CWE-190
Priority MEDIUM 44

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-119
Priority MEDIUM 43

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00711 Published 2019-11-06 No fix listed CWE-125
Priority MEDIUM 44

Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-119
Priority MEDIUM 44

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01084 Published 2019-11-06 No fix listed CWE-476
Priority MEDIUM 44

Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-129
Priority MEDIUM 43

While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00715 Published 2019-11-06 No fix listed CWE-120
Priority LOW 33

Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon I…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2019-09-30 No fix listed CWE-120
Priority LOW 33

Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2019-09-30 No fix listed CWE-125
Priority LOW 33

While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space which could be invalid and thus leads to an undesired behaviour in Snapdragon Auto…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2019-09-30 No fix listed CWE-20
Priority LOW 34

Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mo…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2019-07-25 No fix listed CWE-119
Priority MEDIUM 44

Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon V…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0093 Published 2019-07-25 No fix listed CWE-119
Priority MEDIUM 44

Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon M…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00903 Published 2019-07-25 No fix listed CWE-119
Priority LOW 33

When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2019-07-25 No fix listed CWE-119
Priority MEDIUM 45

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01621 Published 2019-07-25 No fix listed CWE-125
Priority LOW 24

While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00179 Published 2019-07-25 No fix listed CWE-755
Priority MEDIUM 44

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00815 Published 2019-06-14 No fix listed CWE-125
Priority MEDIUM 44

Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2019-05-24 No fix listed CWE-191
Priority MEDIUM 44

Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2019-05-24 No fix listed CWE-191
Load more