Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Mobile
7 CVEs affecting Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Mobile. Latest disclosed: 2020-11-12. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-14132 | Critical | 9.8 | 2020-04-16 | Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdr… |
CVE-2019-14045 | Critical | 9.8 | 2020-03-05 | Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon Consumer IO… |
CVE-2020-11208 | High | 7.8 | 2020-11-12 | Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QC… |
CVE-2020-3625 | High | 7.8 | 2020-06-02 | When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consu… |
CVE-2019-2278 | High | 7.8 | 2019-07-25 | User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mob… |
CVE-2020-11209 | Medium | 5.5 | 2020-11-12 | Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P… |
CVE-2020-11122 | Medium | 5.5 | 2020-09-08 | u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer… |