Qualcomm Pm670 Firmware vulnerabilities

• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +424 more +426 more Out of bound read will happen if EAPOL Key length is less than expected while processing NAN... CVE-2020-11241 7.5 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +400 more +402 more Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in... CVE-2020-11238 7.5 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, pm3003a firmware +266 more +268 more Possible heap overflow while parsing NAL header due to lack of check of length of data received... CVE-2020-11182 9.8 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +285 more +287 more Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical... CVE-2020-11178 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8064au firmware +224 more +226 more Out-of-bounds memory access can occur while calculating alignment requirements for a negative... CVE-2020-11161 7.1 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE... CVE-2020-11159 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +389 more +391 more Possible out of bound read while WLAN frame parsing due to lack of check for body and header... CVE-2020-11126 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 more Possible denial of service scenario due to improper handling of group management action frame in... CVE-2021-1925 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +371 more +373 more Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon... CVE-2021-1910 7.3 HighMay 7, 2021
• qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 more Possible integer overflow due to improper length check while flashing an image in Snapdragon... CVE-2021-1895 6.8 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, pm215 firmware +242 more +244 more Out of bound write in logger due to prefix size is not validated while prepended to logging... CVE-2020-11294 5.9 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 more Out of bound read can happen in Widevine TA while copying data to buffer from user data due to... CVE-2020-11293 5.1 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 more Out of bound write can occur in TZ command handler due to lack of validation of command ID in... CVE-2020-11289 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +316 more +318 more Out of bound write can occur in playready while processing command due to lack of input... CVE-2020-11288 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +398 more +400 more Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is... CVE-2020-11285 8.2 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Memory corruption while processing crafted SDES packets due to improper length check in sdes... CVE-2020-11279 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 more Possible use after free due to lack of null check while memory is being freed in FastRPC driver... CVE-2021-1927 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Improper handling of address deregistration on failure can lead to new GPU address allocation... CVE-2021-1906 In KEVFix available 6.2 MediumMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +395 more +397 more Possible use after free due to improper handling of memory mapping of multiple processes... CVE-2021-1905 In KEVFix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 more A possible use-after-free occurrence in audio driver can happen when pointers are not properly... CVE-2021-1891 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +342 more +344 more Denial of service while processing RTCP packets containing multiple SDES reports due to memory... CVE-2020-11255 7.5 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +308 more +310 more Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to... CVE-2020-11252 7.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer... CVE-2020-11251 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 more Out of bound read occurs while processing crafted SDP due to lack of check of null string in... CVE-2020-11191 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +335 more +337 more When sending a socket event message to a user application, invalid information will be passed if... CVE-2020-11234 Fix available 8.4 HighApril 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +379 more +381 more Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto,... CVE-2020-11299 9.8 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size... CVE-2020-11227 9.8 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out of bound memory read in Data modem while unpacking data due to lack of offset length check in... CVE-2020-11226 7.5 HighMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 more Buffer over read while processing MT SMS with maximum length due to improper length check in... CVE-2020-11222 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information... CVE-2020-11221 5.5 MediumMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 more Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data... CVE-2020-11218 7.5 HighMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and... CVE-2020-11199 5.5 MediumMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +367 more +369 more Out of bound write while parsing SDP string due to missing check on null termination in... CVE-2020-11192 9.8 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11190 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11189 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +396 more +398 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11188 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +383 more +385 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11171 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Potential out of bound read exception when UE receives unusually large number of padding octets... CVE-2020-11166 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of... CVE-2020-11309 Fix available 7.8 HighMarch 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, aqt1000 firmware +331 more +333 more Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size... CVE-2020-11308 Fix available 6.8 MediumMarch 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +326 more +328 more Use after free condition in msm ioctl events due to race between the ioctl register and... CVE-2020-11290 Fix available 7.0 HighMarch 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +313 more +315 more Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid... CVE-2020-3664 6.0 MediumFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 more Arithmetic overflow can happen while processing NOA IE due to improper error handling in... CVE-2020-11296 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +410 more +412 more Denial of service while processing fine timing measurement request (FTMR) frame with reserved... CVE-2020-11280 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +375 more +377 more Possible denial of service while handling host WMI command due to improper validation in... CVE-2020-11278 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +512 more +514 more Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response... CVE-2020-11276 9.1 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +469 more +471 more Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE... CVE-2020-11275 9.1 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +413 more +415 more Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting... CVE-2020-11270 7.5 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• Show olderLoading…