alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2020-11220 (published 2021-03-17)
While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, pm4125, pm4125_firmware, pm4250, pm4250_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm640a, pm640a_firmware, pm640l, pm640l_firmware, pm640p, pm640p_firmware, pm7250b
CVE-2020-11221 (published 2021-03-17)
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8084, apq8084_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csr6030, csr6030_firmware, csrb31024, csrb31024_firmware, mdm8207
CVE-2020-11222 (published 2021-03-17)
Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csrb31024, csrb31024_firmware, fsm10055, fsm10055_firmware, msm8917, msm8917_firmware, msm8920, msm8920_firmware, msm8940, msm8940_firmware, msm8953, msm8953_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm4250
CVE-2020-11223 (published 2021-02-22)
Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, pm3003a, pm3003a_firmware, pm456, pm456_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6250, pm6250_firmware, pm6350, pm6350_firmware, pm660, pm660_firmware, pm660a, pm660a_firmware, pm660l, pm660l_firmware, pm7150a, pm7150a_firmware, pm7150l
CVE-2020-11225 (published 2021-01-21)
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8064au, apq8096au, aqt1000, ar8031, ar8035, ar9380, csr8811, csra6620, csra6640, csrb31024, fsm10055, fsm10056, ipq4018, ipq4019, ipq4028, ipq4029, ipq5010, ipq5018, ipq6000, ipq6005, ipq6010, ipq6018, ipq6028, ipq8064, ipq8065
CVE-2020-11226 (published 2021-03-17)
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8084, apq8084_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csr6030, csr6030_firmware, csrb31024, csrb31024_firmware, mdm8207
CVE-2020-11227 (published 2021-03-17)
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8084, apq8084_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csr6030, csr6030_firmware, csrb31024, csrb31024_firmware, mdm8207
CVE-2020-11228 (published 2021-03-17)
Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, pm4125, pm4125_firmware, pm4250, pm4250_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm640a, pm640a_firmware, pm640l, pm640l_firmware, pm640p, pm640p_firmware, pm7250b
CVE-2020-1123 (published 2020-05-21)
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1084.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2020-11230 (published 2021-03-17)
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, fsm10055, fsm10055_firmware, pm3003a, pm3003a_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm7350c, pm7350c_firmware, pm8004, pm8004_firmware, pm8008, pm8008_firmware, pm8009, pm8009_firmware, pm8150a, pm8150a_firmware, pm8150b
CVE-2020-11231 (published 2021-04-07)
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, pm215, pm215_firmware, pm3003a, pm3003a_firmware, pm439, pm439_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150l, pm6150l_firmware, pm7150a, pm7150a_firmware, pm7150l
CVE-2020-11233 (published 2021-06-09)
Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, csr6030, csr6030_firmware, mdm9206, mdm9206_firmware, mdm9230, mdm9230_firmware, mdm9250, mdm9250_firmware, mdm9330, mdm9330_firmware, mdm9607, mdm9607_firmware, mdm9626
CVE-2020-11234 (published 2021-04-07)
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csr6030, csr6030_firmware, csra6620, csra6620_firmware, csra6640
CVE-2020-11235 (published 2021-06-09)
Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8084, apq8084_firmware, apq8092, apq8092_firmware, apq8094, apq8094_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar7420, ar7420_firmware, ar8031, ar8031_firmware, ar8035
CVE-2020-11236 (published 2021-04-07)
Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: csrb31024, csrb31024_firmware, pm3003a, pm3003a_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm8008, pm8008_firmware, pm8009, pm8009_firmware, pm8150a, pm8150a_firmware, pm8150b
CVE-2020-11237 (published 2021-04-07)
Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: csrb31024, csrb31024_firmware, pm3003a, pm3003a_firmware, pm456, pm456_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6250, pm6250_firmware, pm6350, pm6350_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm8008
CVE-2020-11238 (published 2021-06-09)
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010
CVE-2020-11239 (published 2021-06-09)
Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csra6620
CVE-2020-1124 (published 2020-05-21)
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-2020-1185, CVE-2020-1186, CVE-2020-1187, CVE-2020-1188, CVE-2020-1189, CVE-2020-1190, CVE-2020-1191.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2020-11240 (published 2021-06-09)
Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of the user argument in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-131
Affected vendors: qualcomm
Affected products: apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, msm8909w, msm8909w_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, pm215
CVE-2020-11241 (published 2021-06-09)
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029
CVE-2020-11242 (published 2021-04-07)
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: qualcomm
Affected products: pm660, pm660_firmware, pm660a, pm660a_firmware, pm660l, pm660l_firmware, pm855a, pm855a_firmware, pmm855au, pmm855au_firmware, qat3514, qat3514_firmware, qat3522, qat3522_firmware, qat3550, qat3550_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595
CVE-2020-11243 (published 2021-04-07)
RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, fsm10055, fsm10055_firmware, fsm10056, fsm10056_firmware, pm3003a, pm3003a_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm8004, pm8004_firmware, pm8008, pm8008_firmware, pm8009, pm8009_firmware, pm8150
CVE-2020-11245 (published 2021-04-07)
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm4250, pm4250_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm640a, pm640a_firmware, pm640l, pm640l_firmware, pm640p
CVE-2020-11246 (published 2021-04-07)
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, msm8917, msm8917_firmware, msm8920, msm8920_firmware, msm8937, msm8937_firmware, msm8940, msm8940_firmware, msm8953, msm8953_firmware, pm215, pm215_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm439
CVE-2020-11247 (published 2021-04-07)
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, msm8917, msm8917_firmware, msm8920, msm8920_firmware, msm8937, msm8937_firmware, msm8940, msm8940_firmware, msm8953, msm8953_firmware, pm215, pm215_firmware, pm3003a
CVE-2020-1125 (published 2020-05-21)
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-1155, CVE-2020-1156, CVE-2020-1157, CVE-2020-1158, CVE-2020-1164.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: microsoft
Affected products: windows_10, windows_8.1, windows_rt_8.1, windows_server_2016, windows_server_2019
CVE-2020-11250 (published 2021-06-09)
Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: qualcomm
Affected products: apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fsm10055, fsm10055_firmware, fsm10056, fsm10056_firmware, ipq6010, ipq6010_firmware, ipq6018
CVE-2020-11251 (published 2021-04-07)
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8151, ar8151_firmware, csr6030, csr6030_firmware, csrb31024, csrb31024_firmware, mdm8207, mdm8207_firmware, mdm8215
CVE-2020-11252 (published 2021-04-07)
Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fsm10055, fsm10055_firmware, fsm10056, fsm10056_firmware, ipq6000, ipq6000_firmware, ipq6005, ipq6005_firmware, ipq6010, ipq6010_firmware, ipq6018
CVE-2020-11253 (published 2021-02-22)
Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, pm3003a, pm3003a_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm8004, pm8004_firmware, pm8008, pm8008_firmware, pm8009
CVE-2020-11254 (published 2021-05-07)
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: pm6150a, pm6150l, pm6350, pm660, pm660l, pm7250b, pm8008, pm8009, pm8350, pm8350b, pm8350bh, pm8350c, pmk8003, pmk8350, pmm6155au, pmm8155au, pmm8195au, pmr735a, pmr735b, qat3516, qat3518, qat3519, qat3555, qat5515, qat5516
CVE-2020-11255 (published 2021-04-07)
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-401
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, csrb31024, csrb31024_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9628
CVE-2020-11256 (published 2021-06-09)
Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: ar7420, ar7420_firmware, ar9580, ar9580_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, qca10901, qca10901_firmware, qca4024, qca4024_firmware, qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware, qca8075
CVE-2020-11257 (published 2021-06-09)
Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: ar7420, ar7420_firmware, ar9580, ar9580_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, qca10901, qca10901_firmware, qca4024, qca4024_firmware, qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware, qca8075
CVE-2020-11258 (published 2021-06-09)
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: ar7420, ar7420_firmware, ar9580, ar9580_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, qca10901, qca10901_firmware, qca4024, qca4024_firmware, qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware, qca8075
CVE-2020-11259 (published 2021-06-09)
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: ar7420, ar7420_firmware, ar9580, ar9580_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, qca10901, qca10901_firmware, qca4024, qca4024_firmware, qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware, qca8075
CVE-2020-1126 (published 2020-05-21)
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1136, CVE-2020-1150.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2020-11260 (published 2021-06-09)
An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-908
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, pm215, pm215_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm439, pm439_firmware, pm456, pm456_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a
CVE-2020-11261 (published 2021-06-09)
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csra6620, csra6620_firmware, csra6640
Added to CISA KEV catalog: 2021-12-01
KEV required action: Apply updates per vendor instructions.
CVE-2020-11262 (published 2021-06-09)
A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2020-11263 (published 2022-01-03)
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6426, qca6426_firmware, qca6436, qca6436_firmware, qca8337, qca8337_firmware, qca9984, qca9984_firmware, qcm2290, qcm2290_firmware, qcm4290, qcm4290_firmware, qcs2290, qcs2290_firmware, qcs405, qcs405_firmware, qcs410, qcs410_firmware, qcs4290
CVE-2020-11264 (published 2021-09-08)
Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: qualcomm
Affected products: apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9650, mdm9650_firmware, msm8953, msm8953_firmware, msm8996au, msm8996au_firmware, qca1062
CVE-2020-11265 (published 2021-06-09)
Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: ar7420, ar7420_firmware, ar9580, ar9580_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, qca10901, qca10901_firmware, qca4024, qca4024_firmware, qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware, qca8075
CVE-2020-11266 (published 2021-06-09)
Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Affected vendors: qualcomm
Affected products: ar7420, ar7420_firmware, ar9580, ar9580_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, qca10901, qca10901_firmware, qca4024, qca4024_firmware, qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware, qca8075
CVE-2020-11267 (published 2021-06-09)
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar7420, ar7420_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr6030
CVE-2020-11268 (published 2021-05-07)
Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8009, apq8016, apq8074, apq8084, apq8094, ar6003, mdm8215, mdm8215m, mdm8615m, mdm9215, mdm9235m, mdm9310, mdm9609, mdm9615, mdm9615m, mdm9635m, mdm9640, mdm9645, msm8108, msm8208, msm8209, msm8216, msm8274, msm8608, msm8674
CVE-2020-11269 (published 2021-02-22)
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8016, apq8016_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8039, apq8039_firmware, apq8052, apq8052_firmware, apq8053, apq8053_firmware, apq8056, apq8056_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8084, apq8084_firmware, apq8092
CVE-2020-11270 (published 2021-02-22)
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar7420, ar7420_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029
CVE-2020-11271 (published 2021-02-22)
Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fsm10055, fsm10055_firmware, fsm10056, fsm10056_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq6000
CVE-2020-11272 (published 2021-02-22)
Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9206
CVE-2020-11273 (published 2021-05-07)
Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: csrb31024, csrb31024_firmware, pm3003a, pm3003a_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm8005, pm8005_firmware, pm8008, pm8008_firmware, pm8009, pm8009_firmware, pm8150a
CVE-2020-11274 (published 2021-05-07)
Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, csrb31024, csrb31024_firmware, fsm10055, fsm10055_firmware, fsm10056, fsm10056_firmware, pm3003a, pm3003a_firmware, pm456, pm456_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6250, pm6250_firmware, pm6350, pm6350_firmware, pm640a
CVE-2020-11275 (published 2021-02-22)
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151, ar8151_firmware, ar9380, ar9380_firmware, csr6030, csr6030_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640
CVE-2020-11276 (published 2021-02-22)
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8084, apq8084_firmware, apq8092, apq8092_firmware, apq8094, apq8094_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar8151
CVE-2020-11277 (published 2021-02-22)
Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: qualcomm
Affected products: pm3003a, pm3003a_firmware, pm4250, pm4250_firmware, pm6125, pm6125_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm7150a, pm7150a_firmware, pm7150l, pm7150l_firmware, pm7250, pm7250_firmware, pm7250b, pm7250b_firmware, pm7350c, pm7350c_firmware, pm8008, pm8008_firmware, pm8009
CVE-2020-11278 (published 2021-02-22)
Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq6000, ipq6000_firmware, ipq6005, ipq6005_firmware, ipq6010, ipq6010_firmware, ipq6018
CVE-2020-11279 (published 2021-05-07)
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053, apq8053_firmware, apq8084, apq8084_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8151, ar8151_firmware, csr6030, csr6030_firmware, csrb31024, csrb31024_firmware, mdm8207
CVE-2020-11280 (published 2021-02-22)
Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar7420, ar7420_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029
CVE-2020-11281 (published 2021-02-22)
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq6000, ipq6000_firmware, ipq6005, ipq6005_firmware, ipq6010, ipq6010_firmware, ipq6018
CVE-2020-11282 (published 2021-02-22)
Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8037, apq8053, apq8064au, apq8076, apq8096au, aqt1000, ar6003, ar8031, ar8035, ar8151, csra6620, csra6640, csrb31024, fsm10055, fsm10056, mdm8215, mdm9206, mdm9215, mdm9250, mdm9310, mdm9615, mdm9650
CVE-2020-11283 (published 2021-02-22)
A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8009, apq8009w, apq8017, apq8053, apq8064au, apq8096au, aqt1000, ar8031, ar8151, csra6620, csra6640, fsm10055, fsm10056, mdm9206, mdm9650, msm8909w, msm8917, msm8937, msm8953, msm8996au, pm215, pm3003a, pm4125, pm439, pm456
CVE-2020-11284 (published 2021-05-07)
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-667
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, pm3003a, pm3003a_firmware, pm4125, pm4125_firmware, pm4250, pm4250_firmware, pm6125, pm6125_firmware, pm6150, pm6150_firmware, pm6150a, pm6150a_firmware, pm6150l, pm6150l_firmware, pm6350, pm6350_firmware, pm640a, pm640a_firmware, pm640l, pm640l_firmware, pm640p