Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music
15 CVEs affecting Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music. Latest disclosed: 2019-12-18. Critical: 6, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10557 | Critical | 9.8 | 2019-12-18 | Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connect… |
CVE-2019-2268 | Critical | 9.8 | 2019-11-21 | Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CVE-2019-10542 | Critical | 9.8 | 2019-11-06 | Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snap… |
CVE-2019-2309 | Critical | 9.8 | 2019-07-25 | While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. in Snapdragon Auto… |
CVE-2019-2307 | Critical | 9.8 | 2019-07-25 | Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Con… |
CVE-2019-2305 | Critical | 9.8 | 2019-07-25 | Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Conne… |
CVE-2019-10598 | High | 7.8 | 2019-12-18 | Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cau… |
CVE-2019-10537 | High | 7.8 | 2019-12-18 | Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead… |
CVE-2018-11980 | High | 7.8 | 2019-12-18 | When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie… |
CVE-2019-10563 | High | 7.8 | 2019-11-21 | Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Con… |
CVE-2019-10507 | High | 7.8 | 2019-09-30 | Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivi… |
CVE-2019-2312 | High | 7.8 | 2019-07-25 | When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto, Snapdrago… |
CVE-2018-11934 | High | 7.8 | 2019-06-14 | Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connec… |
CVE-2018-11927 | High | 7.8 | 2019-05-24 | Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdrag… |
CVE-2018-11958 | Medium | 5.5 | 2019-04-04 | Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Co… |