Qualcomm, Inc.
Page 15 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11189 | Critical | 9.1 | 2021-03-17 | Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2020-11188 | Critical | 9.1 | 2021-03-17 | Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2020-11186 | Medium | 5.5 | 2021-03-17 | Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdrag… |
CVE-2020-11171 | Critical | 9.1 | 2021-03-17 | Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2020-11166 | Critical | 9.1 | 2021-03-17 | Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon… |
CVE-2020-3664 | Medium | 6.0 | 2021-02-22 | Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2020-11297 | High | 7.5 | 2021-02-22 | Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2020-11296 | High | 7.5 | 2021-02-22 | Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… |
CVE-2020-11287 | High | 7.5 | 2021-02-22 | Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snap… |
CVE-2020-11286 | Medium | 6.8 | 2021-02-22 | An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interf… |
CVE-2020-11283 | Critical | 9.8 | 2021-02-22 | A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2020-11282 | High | 7.8 | 2021-02-22 | Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in S… |
CVE-2020-11281 | High | 7.5 | 2021-02-22 | Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snap… |
CVE-2020-11280 | High | 7.5 | 2021-02-22 | Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling i… |
CVE-2020-11278 | High | 7.5 | 2021-02-22 | Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… |
CVE-2020-11277 | High | 7.4 | 2021-02-22 | Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Sna… |
CVE-2020-11276 | Critical | 9.1 | 2021-02-22 | Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute… |
CVE-2020-11275 | Critical | 9.1 | 2021-02-22 | Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Comput… |
CVE-2020-11272 | Critical | 9.8 | 2021-02-22 | Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after… |
CVE-2020-11271 | High | 7.8 | 2021-02-22 | Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2020-11270 | High | 7.5 | 2021-02-22 | Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Au… |
CVE-2020-11269 | High | 8.8 | 2021-02-22 | Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2020-11253 | High | 7.8 | 2021-02-22 | Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… |
CVE-2020-11223 | High | 7.8 | 2021-02-22 | Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2020-11204 | High | 7.8 | 2021-02-22 | Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from sh… |
CVE-2020-11203 | High | 7.1 | 2021-02-22 | Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity… |
CVE-2020-11198 | Medium | 6.7 | 2021-02-22 | Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto… |
CVE-2020-11195 | High | 7.8 | 2021-02-22 | Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdr… |
CVE-2020-11194 | High | 7.8 | 2021-02-22 | Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdragon Compu… |
CVE-2020-11187 | High | 7.8 | 2021-02-22 | Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile |
CVE-2020-11177 | High | 8.8 | 2021-02-22 | User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdra… |
CVE-2020-11170 | Critical | 9.8 | 2021-02-22 | Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon… |
CVE-2020-11163 | Critical | 9.8 | 2021-02-22 | Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapd… |
CVE-2020-11147 | Medium | 6.7 | 2021-02-22 | Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdrago… |
CVE-2020-3691 | Critical | 9.8 | 2021-01-21 | Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2020-3687 | Medium | 5.5 | 2021-01-21 | Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue. |
CVE-2020-3686 | Critical | 9.8 | 2021-01-21 | Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snap… |
CVE-2020-3685 | High | 7.5 | 2021-01-21 | Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2020-11225 | Critical | 9.8 | 2021-01-21 | Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2020-11217 | High | 7.8 | 2021-01-21 | A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2020-11216 | Critical | 9.8 | 2021-01-21 | Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2020-11215 | Critical | 9.1 | 2021-01-21 | An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2020-11214 | High | 7.5 | 2021-01-21 | Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in… |
CVE-2020-11213 | Critical | 9.8 | 2021-01-21 | Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2020-11212 | Critical | 9.8 | 2021-01-21 | Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2020-11200 | High | 7.5 | 2021-01-21 | Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2020-11197 | Critical | 9.8 | 2021-01-21 | Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip with invalid data in… |
CVE-2020-11185 | High | 7.8 | 2021-01-21 | Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in Snapdragon Auto, Sn… |
CVE-2020-11183 | Medium | 6.7 | 2021-01-21 | A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in Snapdragon Auto, Sn… |
CVE-2020-11181 | High | 7.8 | 2021-01-21 | Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snapdragon Compute, Sna… |
CVE-2020-11180 | High | 7.8 | 2021-01-21 | Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2020-11179 | High | 7.0 | 2021-01-21 | Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compu… |
CVE-2020-11167 | Critical | 9.8 | 2021-01-21 | Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2020-11152 | Medium | 6.4 | 2021-01-21 | Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, S… |
CVE-2020-11151 | Medium | 6.4 | 2021-01-21 | Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Com… |
CVE-2020-11150 | Medium | 6.7 | 2021-01-21 | Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon A… |
CVE-2020-11149 | Medium | 6.7 | 2021-01-21 | Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2020-11148 | Medium | 6.7 | 2021-01-21 | Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback i… |
CVE-2020-11146 | High | 7.8 | 2021-01-21 | Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2020-11145 | High | 7.5 | 2021-01-21 | Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapd… |
CVE-2020-11144 | Critical | 9.1 | 2021-01-21 | Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Com… |
CVE-2020-11143 | Critical | 9.8 | 2021-01-21 | Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdra… |
CVE-2020-11140 | Critical | 9.8 | 2021-01-21 | Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2020-11139 | High | 7.5 | 2021-01-21 | Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2020-11138 | Critical | 9.8 | 2021-01-21 | Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto… |
CVE-2020-11137 | Critical | 9.8 | 2021-01-21 | Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instabi… |
CVE-2020-11136 | Critical | 9.8 | 2021-01-21 | Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdra… |
CVE-2020-11119 | High | 7.5 | 2021-01-21 | Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute… |
CVE-2020-3639 | Critical | 9.8 | 2020-11-12 | u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Au… |
CVE-2020-3632 | High | 7.8 | 2020-11-12 | u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55… |
CVE-2020-11209 | Medium | 5.5 | 2020-11-12 | Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P… |
CVE-2020-11208 | High | 7.8 | 2020-11-12 | Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QC… |
CVE-2020-11207 | High | 7.8 | 2020-11-12 | Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2020-11206 | High | 7.8 | 2020-11-12 | Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2020-11205 | High | 7.8 | 2020-11-12 | u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2020-11202 | High | 7.8 | 2020-11-12 | Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure… |
CVE-2020-11201 | High | 7.8 | 2020-11-12 | Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2020-11196 | Critical | 9.8 | 2020-11-12 | u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2020-11193 | Critical | 9.8 | 2020-11-12 | u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2020-11184 | Critical | 9.8 | 2020-11-12 | u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industri… |
CVE-2020-11175 | High | 7.8 | 2020-11-12 | u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.'… |
CVE-2020-11168 | Critical | 9.8 | 2020-11-12 | u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdrag… |
CVE-2020-11132 | High | 7.1 | 2020-11-12 | u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2020-11131 | High | 7.8 | 2020-11-12 | u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapd… |
CVE-2020-11130 | High | 7.8 | 2020-11-12 | u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Indus… |
CVE-2020-11127 | High | 7.8 | 2020-11-12 | u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while… |
CVE-2020-11123 | Medium | 5.5 | 2020-11-12 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen passw… |
CVE-2020-11121 | High | 7.8 | 2020-11-12 | u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2020-3704 | High | 7.5 | 2020-11-02 | u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dea… |
CVE-2020-3703 | Critical | 9.8 | 2020-11-02 | u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is… |
CVE-2020-3696 | High | 7.8 | 2020-11-02 | u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for pa… |
CVE-2020-3694 | High | 7.8 | 2020-11-02 | u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2020-3693 | High | 7.8 | 2020-11-02 | u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2020-3692 | Critical | 9.8 | 2020-11-02 | u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from serv… |
CVE-2020-3690 | High | 7.8 | 2020-11-02 | u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2020-3684 | High | 7.8 | 2020-11-02 | u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in… |
CVE-2020-3678 | High | 7.8 | 2020-11-02 | u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon Consumer IOT, Snapdragon In… |
CVE-2020-3673 | Critical | 9.8 | 2020-11-02 | u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapd… |
CVE-2020-3670 | Critical | 9.1 | 2020-11-02 | u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container'… |
CVE-2020-3657 | Critical | 9.8 | 2020-11-02 | u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due… |