Skip to contentQualcomm, Inc. Snapdragon Industrial Iot vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +15 more +17 moreu'Use out of range pointer issue can occur due to incorrect buffer range check during the...CVE-2020-36937.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm agatti firmware, kamorta firmware +15 more +17 moreu'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack...CVE-2020-36929.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +27 more +29 moreu'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the...CVE-2020-36907.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 moreu'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...CVE-2020-36847.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, kamorta firmware +7 more +9 moreu'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a...CVE-2020-36787.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 moreu'Buffer overflow can happen as part of SIP message packet processing while storing values in...CVE-2020-36739.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 moreu'Potential out of bounds read while processing downlink NAS transport message due to improper...CVE-2020-36709.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreu'Remote code execution can happen by sending a carefully crafted POST query when Device...CVE-2020-3657EPSS 26.6%9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 moreu'Buffer overflow occurs while processing SIP message packet due to lack of check of index...CVE-2020-36549.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +14 more +16 moreu'An Unaligned address or size can propagate to the database due to improper page permissions and...CVE-2020-36387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check'...CVE-2020-111699.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 moreu'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue...CVE-2020-111647.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8076 firmware +15 more +17 moreu'Lack of handling unexpected control messages while encryption was in progress can terminate the...CVE-2020-111577.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm qca6390 firmware, qcn7605 firmware +6 more +8 moreu'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap...CVE-2020-111568.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length...CVE-2020-111558.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of...CVE-2020-111548.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, qca6390 firmware +4 more +6 moreu'Out of bound memory access while processing GATT data received due to lack of check of pdu data...CVE-2020-111539.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +7 more +9 moreu'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap...CVE-2020-111418.1 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm ar9344 firmware +1 moreu'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio...CVE-2020-111148.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 moreu'Array index underflow issue in adsp driver due to improper check of channel id before used as...CVE-2020-11174Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8053 firmware +31 more +33 moreu'Two threads running simultaneously from user space can lead to race condition in fastRPC driver...CVE-2020-11173Fix available7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 moreu'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events...CVE-2020-11162Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 moreu'Out of bound access can happen in MHI command process due to lack of check of channel id value...CVE-2020-11125Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +15 more +17 moreu'During execution after Address Space Layout Randomization is turned on for QTEE, part of code...CVE-2020-36795.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm nicobar firmware, qcs405 firmware +6 more +8 moreu'Information can leak into userspace due to improper transfer of data from kernel to userspace'...CVE-2020-36745.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 moreu'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport...CVE-2020-36349.1 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm kamorta firmware, nicobar firmware +14 more +16 moreu'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely...CVE-2020-36177.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 moreu'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon...CVE-2020-111357.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, arista access point, debian linux +11 more +13 moreu'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead...CVE-2020-3702Fix available6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq5018 firmware, ipq6018 firmware +17 more +19 moreu'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as...CVE-2020-36759.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 moreu'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset'...CVE-2020-36699.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 moreu'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than...CVE-2020-36689.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 moreu'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating...CVE-2020-36679.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreu'Out of bounds memory access during memory copy while processing Host command' in Snapdragon...CVE-2020-36667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8909w firmware +1 moreu'Possible out of bound write in DSP driver code due to lack of check of data received from user'...CVE-2020-36487.8 High
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, qcs405 firmware +5 more +7 moreu'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size'...CVE-2020-36477.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm bitra firmware, msm8909w firmware +14 more +16 moreu'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in...CVE-2020-36467.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 moreu'Information disclosure issue occurs as in current logic Secure Touch session is released...CVE-2020-36445.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreu'Information disclosure issue can occur due to partial secure display-touch session tear-down'...CVE-2020-36435.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm bitra firmware, kamorta firmware +8 more +10 moreu'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption...CVE-2020-36297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +59 more +61 moreu'A potential buffer overflow exists due to integer overflow when parsing handler options due to...CVE-2020-36247.8 High
- qualcomm apq8009, apq8017, apq8053 +128 more +130 moreu'Channel name string which has been read from shared memory is potentially subjected to string...CVE-2020-36227.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check to ensure that the TX read index & RX write index that are read from shared...CVE-2020-36215.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check of integer overflow while doing a round up operation for data read from shared...CVE-2020-36205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreu'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to...CVE-2020-36197.0 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, kamorta firmware +13 more +15 moreu'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access...CVE-2020-36117.8 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm msm8998 firmware, qcs605 firmware +9 more +11 moreu'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in...CVE-2020-111337.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 moreu'Possible out of bound access while copying the mask file content into the buffer without...CVE-2020-111287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +23 more +25 moreu'While processing SMCInvoke asynchronous message header, message count is modified leading to a...CVE-2019-141197.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Information disclosure issue occurs as in current logic as secure touch is released without...CVE-2019-141155.5 Medium
- Show moreLoading…