alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-11114 (published 2020-11-02)
u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a crafted Link Layer packet(Equivalent to CVE-2019-17060,CVE-2019-17061 and CVE-2019-17517 in Sweyntooth paper)' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in AR9344
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: ar9344, ar9344_firmware
CVE-2020-11115 (published 2020-09-08)
u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QM215, Rennell, SA415M, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM845, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, kamorta, kamorta_firmware, mdm9206, mdm9206_firmware, mdm9207c, mdm9207c_firmware, mdm9607, mdm9607_firmware, mdm9640, mdm9640_firmware, mdm9650, mdm9650_firmware, msm8905, msm8905_firmware, msm8909w
CVE-2020-11116 (published 2020-09-08)
u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QCS610, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, kamorta, kamorta_firmware, mdm9206, mdm9206_firmware, mdm9207c, mdm9207c_firmware, mdm9607, mdm9607_firmware, mdm9640, mdm9640_firmware, mdm9650, mdm9650_firmware, msm8905, msm8905_firmware, msm8909w
CVE-2020-11117 (published 2020-09-08)
u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, QCA9980
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: qualcomm
Affected products: ipq4019, ipq4019_firmware, ipq6018, ipq6018_firmware, ipq8064, ipq8064_firmware, ipq8074, ipq8074_firmware, qca4531, qca4531_firmware, qca9531, qca9531_firmware, qca9980, qca9980_firmware
CVE-2020-11118 (published 2020-09-08)
u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QCS610, QM215, Rennell, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, kamorta, kamorta_firmware, mdm9150, mdm9150_firmware, mdm9206, mdm9206_firmware, mdm9207c, mdm9207c_firmware, mdm9607, mdm9607_firmware, mdm9640, mdm9640_firmware, mdm9650
CVE-2020-11119 (published 2021-01-21)
Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, ar9380, ar9380_firmware, csr6030, csr6030_firmware, csr8811, csr8811_firmware, csra6620
CVE-2020-1112 (published 2020-05-21)
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2020-11120 (published 2020-09-08)
u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be valid and will lead to use after free scenario' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, APQ8098, Bitra, Kamorta, MSM8917, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM632, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, kamorta, kamorta_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, msm8998, msm8998_firmware, qcm2150, qcm2150_firmware, qcs405, qcs405_firmware, qcs605, qcs605_firmware, qm215, qm215_firmware, rennell, rennell_firmware, saipan
CVE-2020-11121 (published 2020-11-12)
u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: qcm4290, qcm4290_firmware, qcs4290, qcs4290_firmware, qm215, qm215_firmware, qsm8350, qsm8350_firmware, sa6145p, sa6145p_firmware, sa6155, sa6155_firmware, sa6155p, sa6155p_firmware, sa8155, sa8155_firmware, sa8155p, sa8155p_firmware, sc8180x, sc8180x_firmware, sc8180xp, sc8180xp_firmware, sdx55, sdx55_firmware, sdx55m
CVE-2020-11122 (published 2020-09-08)
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: apq8098, apq8098_firmware, bitra, bitra_firmware, kamorta, kamorta_firmware, sa6155p, sa6155p_firmware, saipan, saipan_firmware, sm6150, sm6150_firmware, sm7150, sm7150_firmware, sm8150, sm8150_firmware, sm8250, sm8250_firmware, sxr2130, sxr2130_firmware
CVE-2020-11123 (published 2020-11-12)
u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper operations.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MDM9655, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QM215, QSM8250, QSM8350, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180XP, SDA429W, SDA640, SDA660, SDA670, SDA845, SDA855, SDM1000, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDW2500, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8096, apq8096_firmware, apq8096au, apq8096au_firmware, apq8096sg, apq8096sg_firmware, apq8098, apq8098_firmware, mdm8207, mdm8207_firmware, mdm9150, mdm9150_firmware, mdm9205
CVE-2020-11124 (published 2020-09-09)
u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCS404, QCS405, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC8180X, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: mdm9607, mdm9607_firmware, nicobar, nicobar_firmware, qcs404, qcs404_firmware, qcs405, qcs405_firmware, qcs610, qcs610_firmware, rennell, rennell_firmware, sa6155p, sa6155p_firmware, sa8155p, sa8155p_firmware, saipan, saipan_firmware, sc8180x, sc8180x_firmware, sdm660, sdm660_firmware, sdx55, sdx55_firmware, sm6150
CVE-2020-11125 (published 2020-11-02)
u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9150, MDM9607, MDM9650, MSM8905, MSM8917, MSM8953, Nicobar, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: agatti, agatti_firmware, apq8009, apq8009_firmware, bitra, bitra_firmware, ipq4019, ipq4019_firmware, ipq5018, ipq5018_firmware, ipq6018, ipq6018_firmware, ipq8064, ipq8064_firmware, ipq8074, ipq8074_firmware, kamorta, kamorta_firmware, mdm9150, mdm9150_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, msm8905
CVE-2020-11126 (published 2021-06-09)
Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018
CVE-2020-11127 (published 2020-11-12)
u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9205, QCM4290, QCS405, QCS410, QCS4290, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA845, SDA855, SDM1000, SDM640, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: mdm9205, mdm9205_firmware, qcm4290, qcm4290_firmware, qcs405, qcs405_firmware, qcs410, qcs410_firmware, qcs4290, qcs4290_firmware, qcs610, qcs610_firmware, qsm8250, qsm8250_firmware, sa415m, sa415m_firmware, sa515m, sa515m_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155, sa6155_firmware, sa6155p
CVE-2020-11128 (published 2020-09-08)
u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9607, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QCS610, QM215, Rennell, SA515M, SA6155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, mdm9150, mdm9150_firmware, mdm9607, mdm9607_firmware, mdm9650, mdm9650_firmware, msm8917, msm8917_firmware, msm8920, msm8920_firmware, msm8937, msm8937_firmware, msm8940, msm8940_firmware, msm8953, msm8953_firmware, msm8998
CVE-2020-11129 (published 2020-09-09)
u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: bitra, bitra_firmware, kamorta, kamorta_firmware, qcs605, qcs605_firmware, saipan, saipan_firmware, sdm710, sdm710_firmware, sm8250, sm8250_firmware, sxr2130, sxr2130_firmware
CVE-2020-1113 (published 2020-05-21)
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-295
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2020-11130 (published 2020-11-12)
u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: qcm4290, qcm4290_firmware, qcs4290, qcs4290_firmware, qm215, qm215_firmware, qsm8350, qsm8350_firmware, sa6145p, sa6145p_firmware, sa6155, sa6155_firmware, sa6155p, sa6155p_firmware, sa8155, sa8155_firmware, sa8155p, sa8155p_firmware, sc8180x, sc8180x_firmware, sc8180xp, sc8180xp_firmware, sdx55, sdx55_firmware, sdx55m
CVE-2020-11131 (published 2020-11-12)
u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9250, MDM9628, MDM9640, MDM9650, MSM8996AU, QCS405, SDA845, SDX20, SDX20M, WCD9330
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9628, mdm9628_firmware, mdm9640, mdm9640_firmware, mdm9650, mdm9650_firmware, msm8996au, msm8996au_firmware, qcs405, qcs405_firmware, sda845, sda845_firmware, sdx20, sdx20_firmware, sdx20m
CVE-2020-11132 (published 2020-11-12)
u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, mdm8207, mdm8207_firmware, mdm9150, mdm9150_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9628, mdm9628_firmware, mdm9650, mdm9650_firmware, msm8108
CVE-2020-11133 (published 2020-09-08)
u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: msm8998, msm8998_firmware, qcs605, qcs605_firmware, sda845, sda845_firmware, sdm630, sdm630_firmware, sdm636, sdm636_firmware, sdm660, sdm660_firmware, sdm670, sdm670_firmware, sdm710, sdm710_firmware, sdm845, sdm845_firmware, sdm850, sdm850_firmware, sxr1130, sxr1130_firmware
CVE-2020-11134 (published 2021-06-09)
Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq6000, ipq6000_firmware, ipq6005, ipq6005_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028
CVE-2020-11135 (published 2020-09-09)
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, MSM8953, Nicobar, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: apq8098, apq8098_firmware, kamorta, kamorta_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, nicobar, nicobar_firmware, qcm2150, qcm2150_firmware, qcs605, qcs605_firmware, qm215, qm215_firmware, rennell, rennell_firmware, sa6155p, sa6155p_firmware, sa8155p, sa8155p_firmware, saipan, saipan_firmware, sdm429
CVE-2020-11136 (published 2021-01-21)
Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8030, apq8037, apq8052, apq8053, apq8056, apq8060a, apq8062, apq8064, apq8064au, apq8076, apq8084, apq8096au, aqt1000, ar6003, ar8031, ar8035, ar8151, ar9374, csra6620, csra6640, csrb31024, mdm8215
CVE-2020-11137 (published 2021-01-21)
Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8030, apq8037, apq8052, apq8053, apq8056, apq8062, apq8064, apq8064au, apq8076, apq8084, apq8096au, aqt1000, ar6003, ar8031, ar8035, ar8151, csra6620, csra6640, csrb31024, mdm8215, mdm8215m, mdm8615m
CVE-2020-11138 (published 2021-01-21)
Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8030, apq8037, apq8052, apq8053, apq8056, apq8062, apq8064, apq8064au, apq8076, apq8084, apq8096au, aqt1000, ar6003, ar8031, ar8035, ar8151, csra6620, csra6640, csrb31024, mdm8215, mdm8215m, mdm8615m
CVE-2020-11139 (published 2021-01-21)
Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8017, apq8037, apq8052, apq8053, apq8056, apq8064au, apq8076, apq8096au, aqt1000, ar8031, ar8035, csra6620, csra6640, mdm9640, mdm9650, msm8917, msm8920, msm8937, msm8940, msm8952, msm8953, msm8956, msm8976, msm8976sg, msm8996au
CVE-2020-1114 (published 2020-05-21)
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2020-11140 (published 2021-01-21)
Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8017, apq8037, apq8052, apq8053, apq8056, apq8062, apq8064au, apq8076, apq8084, apq8096au, aqt1000, ar8031, ar8035, ar8151, csra6620, csra6640, mdm8635m, mdm9225, mdm9225m, mdm9230, mdm9235m, mdm9330, mdm9625, mdm9625m, mdm9630
CVE-2020-11141 (published 2020-11-02)
u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, SA415M, SA515M, SC8180X, SDX55, SM8250
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, qca6390, qca6390_firmware, qcn7605, qcn7605_firmware, sa415m, sa415m_firmware, sa515m, sa515m_firmware, sc8180x, sc8180x_firmware, sdx55, sdx55_firmware, sm8250, sm8250_firmware
CVE-2020-11143 (published 2021-01-21)
Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8009, apq8017, apq8030, apq8037, apq8052, apq8053, apq8056, apq8060a, apq8062, apq8064, apq8064au, apq8076, apq8084, apq8096au, aqt1000, ar6003, ar8031, ar8035, ar8151, ar9374, csra6620, csra6640, mdm8215, mdm8215m, mdm8615m
CVE-2020-11144 (published 2021-01-21)
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8037, apq8053, apq8084, apq8096au, aqt1000, ar6003, ar8035, ar8151, csr6030, csrb31024, fsm10055, mdm8207, mdm8215, mdm8215m, mdm8615m, mdm9150, mdm9205, mdm9206, mdm9207, mdm9215, mdm9230, mdm9250
CVE-2020-11145 (published 2021-01-21)
Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-369
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8037, apq8053, apq8084, apq8096au, aqt1000, ar6003, ar8035, ar8151, csr6030, csrb31024, fsm10055, mdm8207, mdm8215, mdm8215m, mdm8615m, mdm9150, mdm9205, mdm9206, mdm9207, mdm9215, mdm9230, mdm9250
CVE-2020-11146 (published 2021-01-21)
Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8076, aqt1000, ar8031, ar8035, csra6620, csra6640, msm8937, pm215, pm3003a, pm4125, pm456, pm6125, pm6150, pm6150a, pm6150l, pm6250, pm6350, pm640a, pm640l, pm640p, pm660, pm660l, pm670, pm670l, pm7150a
CVE-2020-11147 (published 2021-02-22)
Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, pm3003a, pm3003a_firmware, pm456, pm456_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6250, pm6250_firmware, pm6350, pm6350_firmware, pm660, pm660_firmware, pm660a, pm660a_firmware, pm660l, pm660l_firmware, pm7150a
CVE-2020-11148 (published 2021-01-21)
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8017, apq8053, msm8917, msm8953, pm215, pm3003a, pm439, pm6125, pm6150, pm6150a, pm6150l, pm6350, pm640a, pm640l, pm640p, pm660, pm660l, pm670, pm670l, pm7150a, pm7150l, pm7250, pm7250b, pm7350c, pm8008
CVE-2020-11149 (published 2021-01-21)
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: apq8053, apq8096au, aqt1000, ar8031, ar8035, csra6620, csra6640, mdm9650, pm215, pm3003a, pm6125, pm6150, pm6150a, pm6150l, pm6350, pm640a, pm640l, pm640p, pm660, pm660l, pm670, pm670a, pm670l, pm7150a, pm7150l
CVE-2020-1115 (published 2020-09-11)
<p>An elevation of privilege vulnerability exists when the <a href="https://technet.microsoft.com/library/security/dn848375.aspx#CLFS">Windows Common Log File System (CLFS)</a> driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.</p>
<p>The security update addresses the vulnerability by correcting how CLFS handles objects in memory.</p>
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2020-11150 (published 2021-01-21)
Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: aqt1000, ar8031, ar8035, csra6620, csra6640, pm215, pm3003a, pm6125, pm6150, pm6150a, pm6150l, pm6350, pm640a, pm640l, pm640p, pm660, pm660l, pm670, pm670a, pm670l, pm7150a, pm7150l, pm7250, pm7250b, pm7350c
CVE-2020-11151 (published 2021-01-21)
Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: qualcomm
Affected products: pm3003a, pm6125, pm6150, pm6150a, pm6150l, pm6350, pm640a, pm640l, pm640p, pm7150a, pm7150l, pm7250, pm7250b, pm8008, pm8009, pm8150a, pm8150b, pm8150c, pm8150l, pm8250, pmi632, pmk8002, pmk8003, pmm8195au, pmm855au
CVE-2020-11152 (published 2021-01-21)
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: qualcomm
Affected products: apq8009w, apq8017, apq8037, apq8052, apq8053, apq8056, apq8076, apq8096au, aqt1000, ar8031, csra6620, csra6640, msm8909w, msm8916, msm8917, msm8920, msm8937, msm8940, msm8952, msm8953, msm8956, msm8976, msm8976sg, msm8996au, pm439
CVE-2020-11153 (published 2020-11-02)
u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8053, QCA6390, QCA9379, QCN7605, SC8180X, SDX55
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8053, apq8053_firmware, qca6390, qca6390_firmware, qca9379, qca9379_firmware, qcn7605, qcn7605_firmware, sc8180x, sc8180x_firmware, sdx55, sdx55_firmware
CVE-2020-11154 (published 2020-11-02)
u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, qca6390, qca6390_firmware, qcn7605, qcn7605_firmware, qcn7606, qcn7606_firmware, sa415m, sa415m_firmware, sa515m, sa515m_firmware, sa6155p, sa6155p_firmware, sa8155p, sa8155p_firmware, sc8180x, sc8180x_firmware, sdx55, sdx55_firmware
CVE-2020-11155 (published 2020-11-02)
u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8053, apq8053_firmware, qca6390, qca6390_firmware, qcn7605, qcn7605_firmware, qcn7606, qcn7606_firmware, sa415m, sa415m_firmware, sa515m, sa515m_firmware, sa6155p, sa6155p_firmware, sa8155p, sa8155p_firmware, sc8180x, sc8180x_firmware, sdx55, sdx55_firmware
CVE-2020-11156 (published 2020-11-02)
u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in QCA6390, QCN7605, QCS404, SA415M, SA515M, SC8180X, SDX55, SM8250
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: qca6390, qca6390_firmware, qcn7605, qcn7605_firmware, qcs404, qcs404_firmware, sa415m, sa415m_firmware, sa515m, sa515m_firmware, sc8180x, sc8180x_firmware, sdx55, sdx55_firmware, sm8250, sm8250_firmware
CVE-2020-11157 (published 2020-11-02)
u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8076, MDM9640, MDM9650, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, QCA6174A, QCA9886, QCM2150, QM215, SDM429, SDM439, SDM450, SDM632
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: qualcomm
Affected products: apq8053, apq8053_firmware, apq8076, apq8076_firmware, mdm9640, mdm9640_firmware, mdm9650, mdm9650_firmware, msm8905, msm8905_firmware, msm8917, msm8917_firmware, msm8937, msm8937_firmware, msm8940, msm8940_firmware, msm8953, msm8953_firmware, qca6174a, qca6174a_firmware, qca9886, qca9886_firmware, qcm2150, qcm2150_firmware, qm215
CVE-2020-11158 (published 2020-09-08)
u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS PDF releases prior to IPS System 2020.2
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: ips_pdf
CVE-2020-11159 (published 2021-06-09)
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8084, apq8084_firmware, apq8092, apq8092_firmware, apq8094, apq8094_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151
CVE-2020-1116 (published 2020-05-21)
An information disclosure vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory, aka 'Windows CSRSS Information Disclosure Vulnerability'.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2020-11160 (published 2021-06-09)
Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9650, mdm9650_firmware, pm215, pm215_firmware, pm3003a, pm3003a_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150l, pm6150l_firmware, pm640a
CVE-2020-11161 (published 2021-06-09)
Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, ar8031, ar8031_firmware, ar8151, ar8151_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9650, mdm9650_firmware, msm8996au, msm8996au_firmware, pm215, pm215_firmware, pm3003a, pm3003a_firmware, pm6125, pm6125_firmware, pm6150
CVE-2020-11162 (published 2020-11-02)
u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MSM8917, MSM8953, Nicobar, QCA6390, QCM2150, QCS404, QCS405, QCS605, QM215, QRB5165, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: agatti, agatti_firmware, apq8009, apq8009_firmware, bitra, bitra_firmware, ipq4019, ipq4019_firmware, ipq5018, ipq5018_firmware, ipq6018, ipq6018_firmware, ipq8064, ipq8064_firmware, ipq8074, ipq8074_firmware, kamorta, kamorta_firmware, mdm9607, mdm9607_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, nicobar
CVE-2020-11163 (published 2021-02-22)
Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csrb31024, csrb31024_firmware, msm8917, msm8917_firmware, pm215, pm215_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm4250, pm4250_firmware, pm439, pm439_firmware, pm456, pm456_firmware, pm6125, pm6125_firmware, pm6150
CVE-2020-11164 (published 2020-11-02)
u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8909W, MSM8917, MSM8940, Nicobar, QCA6390, QCM2150, QCS605, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429W, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: qualcomm
Affected products: agatti, agatti_firmware, apq8096au, apq8096au_firmware, apq8098, apq8098_firmware, bitra, bitra_firmware, kamorta, kamorta_firmware, msm8909w, msm8909w_firmware, msm8917, msm8917_firmware, msm8940, msm8940_firmware, nicobar, nicobar_firmware, qca6390, qca6390_firmware, qcm2150, qcm2150_firmware, qcs605, qcs605_firmware, rennell
CVE-2020-11165 (published 2021-06-09)
Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm456, pm456_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6250, pm6250_firmware, pm6350, pm6350_firmware, pm640a, pm640a_firmware, pm640l