Qualcomm Qcc112 vulnerabilities

• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 more Out of bound read can happen in Widevine TA while copying data to buffer from user data due to... CVE-2020-11293 5.1 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 more Out of bound write can occur in TZ command handler due to lack of validation of command ID in... CVE-2020-11289 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer... CVE-2020-11251 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +396 more +398 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11188 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more Possible memory corruption while processing EAPOL frames due to lack of validation of key length... CVE-2020-11269 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +517 more +519 more Possible memory corruption and information leakage in sub-system due to lack of check for... CVE-2020-11204 7.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +405 more +407 more User can overwrite Security Code NV item without knowing current SPC due to improper validation... CVE-2020-11177 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +503 more +505 more Out of bound memory access while playing music playbacks with crafted vorbis content due to... CVE-2020-11170 9.8 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Possible out of bound memory access in audio due to integer underflow while processing modified... CVE-2020-3691 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +490 more +492 more Possible memory out of bound issue during music playback when an incorrect bit stream content is... CVE-2020-3686 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Pointer variable which is freed is not cleared can result in memory corruption and leads to... CVE-2020-3685 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +553 more +555 more Out of bound reads might occur in while processing Service descriptor due to improper validation... CVE-2020-11213 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8016 +539 more +541 more Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field... CVE-2020-11212 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053, apq8064au +328 more +330 more Buffer over-read while parsing RPS due to lack of check of input validation on values received... CVE-2020-11200 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +411 more +413 more Divide by zero issue can happen while updating delta extension header due to improper validation... CVE-2020-11145 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +412 more +414 more Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check... CVE-2020-11144 9.1 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8017 +492 more +494 more Out of bound memory access during music playback with modified content due to copying data... CVE-2020-11143 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017, apq8037 +447 more +449 more Out of bound memory access during music playback with ALAC modified content due to improper... CVE-2020-11140 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017, apq8037 +410 more +412 more Out of bound memory access while processing frames due to lack of check of invalid frames... CVE-2020-11139 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more Uninitialized pointers accessed during music play back with incorrect bit stream due to an... CVE-2020-11138 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more Integer multiplication overflow resulting in lower buffer size allocation than expected causes... CVE-2020-11137 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Buffer Over-read in audio driver while using malloc management function due to not returning NULL... CVE-2020-11136 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +110 more +112 more Time-of-check time-of-use race condition While processing partition entries due to newly created... CVE-2020-11233 Fix available 7.0 HighJanuary 1, 2021