Skip to contentQualcomm Qat3518 Firmware vulnerabilities
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +234 more +236 moreAn improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute,...CVE-2020-112608.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +424 more +426 moreOut of bound read will happen if EAPOL Key length is less than expected while processing NAN...CVE-2020-112417.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +400 more +402 morePossible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in...CVE-2020-112387.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 moreBuffer overflow might occur while parsing unified command due to lack of check of input data...CVE-2020-112357.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, pm3003a firmware +266 more +268 morePossible heap overflow while parsing NAL header due to lack of check of length of data received...CVE-2020-111829.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +285 more +287 moreTrusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical...CVE-2020-111787.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +253 more +255 moreMemory corruption due to buffer overflow while copying the message provided by HLOS into buffer...CVE-2020-111657.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8064au firmware +224 more +226 moreOut-of-bounds memory access can occur while calculating alignment requirements for a negative...CVE-2020-111617.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 moreBuffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE...CVE-2020-111599.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +323 more +325 morePossible stack out of bound write might happen due to time bitmap length and bit duration fields...CVE-2020-111349.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +389 more +391 morePossible out of bound read while WLAN frame parsing due to lack of check for body and header...CVE-2020-111269.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 morePossible denial of service scenario due to improper handling of group management action frame in...CVE-2021-19257.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 moreBuffer overflow can occur due to improper validation of NDP application information length in...CVE-2021-19157.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +371 more +373 moreDouble free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon...CVE-2021-19107.3 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 morePossible integer overflow due to improper length check while flashing an image in Snapdragon...CVE-2021-18956.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm fsm10055 firmware, fsm10056 firmware +171 more +173 moreUse after free in camera If the threadmanager is being cleaned up while the worker thread is...CVE-2020-112956.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, pm215 firmware +242 more +244 moreOut of bound write in logger due to prefix size is not validated while prepended to logging...CVE-2020-112945.9 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 moreOut of bound read can happen in Widevine TA while copying data to buffer from user data due to...CVE-2020-112935.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 moreOut of bound write can occur in TZ command handler due to lack of validation of command ID in...CVE-2020-112897.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +316 more +318 moreOut of bound write can occur in playready while processing command due to lack of input...CVE-2020-112887.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +398 more +400 moreBuffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is...CVE-2020-112858.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 moreMemory corruption while processing crafted SDES packets due to improper length check in sdes...CVE-2020-112797.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +244 more +246 moreDenial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto,...CVE-2020-112747.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +176 more +178 moreHistogram type KPI was teardown with the assumption of the existence of histogram binning info...CVE-2020-112737.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 morePossible use after free due to lack of null check while memory is being freed in FastRPC driver...CVE-2021-1927Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreImproper handling of address deregistration on failure can lead to new GPU address allocation...CVE-2021-1906In KEVFix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +395 more +397 morePossible use after free due to improper handling of memory mapping of multiple processes...CVE-2021-1905In KEVFix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 moreA possible use-after-free occurrence in audio driver can happen when pointers are not properly...CVE-2021-1891Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +342 more +344 moreDenial of service while processing RTCP packets containing multiple SDES reports due to memory...CVE-2020-112557.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +308 more +310 moreTrustzone initialization code will disable xPU`s when memory dumps are enabled and lead to...CVE-2020-112527.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer...CVE-2020-112518.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +317 more +319 moreOut of bound memory read while unpacking data due to lack of offset length check in Snapdragon...CVE-2020-112478.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8037 firmware +315 more +317 moreA double free condition can occur when the device moves to suspend mode during secure playback in...CVE-2020-112468.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +200 more +202 moreUnintended reads and writes by NS EL2 in access control driver due to lack of check of input...CVE-2020-112458.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +135 more +137 moreRRC sends a connection establishment success to NAS even though connection setup validation...CVE-2020-112437.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +163 more +165 moreMemory crash when accessing histogram type KPI input received due to lack of check of histogram...CVE-2020-112378.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +168 more +170 moreMemory corruption due to invalid value of total dimension in the non-histogram type KPI could...CVE-2020-112368.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 moreOut of bound read occurs while processing crafted SDP due to lack of check of null string in...CVE-2020-111918.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +335 more +337 moreWhen sending a socket event message to a user application, invalid information will be passed if...CVE-2020-11234Fix available8.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +213 more +215 moreTwo threads call one or both functions concurrently leading to corruption of pointers and...CVE-2020-11231Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +379 more +381 moreBuffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto,...CVE-2020-112999.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, fsm10055 firmware +178 more +180 morePotential arbitrary memory corruption when the qseecom driver updates ion physical addresses in...CVE-2020-112306.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size...CVE-2020-112279.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut of bound memory read in Data modem while unpacking data due to lack of offset length check in...CVE-2020-112267.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreBuffer over read while processing MT SMS with maximum length due to improper length check in...CVE-2020-112229.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreUsage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information...CVE-2020-112215.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreDenial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data...CVE-2020-112187.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreHLOS to access EL3 stack canary by just mapping imem region due to Improper access control and...CVE-2020-111995.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +367 more +369 moreOut of bound write while parsing SDP string due to missing check on null termination in...CVE-2020-111929.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreBuffer over-read can happen while parsing received SDP values due to lack of NULL termination...CVE-2020-111909.1 Critical
- Show olderLoading…