Skip to contentQualcomm Sa6155p vulnerabilities
- qualcomm snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, apq8009 firmware, apq8009w firmware +397 more +399 moreMemory corruption due to improper check to return error when user application requests memory...CVE-2020-11261In KEVFix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +358 more +360 moreUse after free due to race condition when reopening the device driver repeatedly in Snapdragon...CVE-2020-11250Fix available7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +341 more +343 moreMemory corruption due to ioctl command size was incorrectly set to the size of a pointer and not...CVE-2020-11240Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +404 more +406 moreUse after free issue when importing a DMA buffer by using the CPU address of the buffer due to...CVE-2020-11239Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au, apq8096au +403 more +405 moreOut of bound access in WLAN driver due to lack of validation of array length before copying into...CVE-2020-11225Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar9380, csr8811 +193 more +195 moreOut of bound issue in WLAN driver while processing vdev responses from firmware due to lack of...CVE-2020-11185Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w, apq8017 +284 more +286 moreMemory corruption while calculating L2CAP packet length in reassembly logic when remote sends...CVE-2020-11167Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8076, aqt1000 +312 more +314 moreOut of bound write while copying data using IOCTL due to lack of check of array index received...CVE-2020-11146Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 moreu'When a non standard SIP sigcomp message is received from the network, then there may be chances...CVE-2020-36399.8 Critical
- qualcomm qcs603 firmware, qcs605 firmware, sa6145p firmware +11 more +13 moreu'Improper authorization in DSP process could allow unauthorized users to downgrade the library...CVE-2020-112095.5 Medium
- qualcomm qcs603 firmware, qcs605 firmware, sa6145p firmware +11 more +13 moreu'Out of Bound issue in DSP services while processing received arguments due to improper...CVE-2020-112087.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 moreu'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'...CVE-2020-112077.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, msm8998 firmware +52 more +54 moreu'Possible buffer overflow in Fastrpc while handling received parameters due to lack of...CVE-2020-112067.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, qualcomm qsm8350 firmware, sa6145p firmware +12 more +14 moreu'Possible integer overflow to heap overflow while processing command due to lack of check of...CVE-2020-112057.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +30 more +32 moreu'Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the...CVE-2020-112027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +26 more +28 moreu'Arbitrary access to DSP memory due to improper check in loaded library for data received from...CVE-2020-112017.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...CVE-2020-111969.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned...CVE-2020-111939.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +27 more +29 moreu'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size...CVE-2020-111849.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, msm8909w firmware +29 more +31 moreu'Use after free issue in Bluetooth transport driver when a method in the object is accessed...CVE-2020-111757.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +59 more +61 moreu'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to...CVE-2020-111689.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +79 more +81 moreu'Buffer over read in boot due to size check ignored before copying GUID attribute from request...CVE-2020-111327.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +29 more +31 moreu'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer...CVE-2020-111307.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcm4290 firmware +51 more +53 moreu'Integer overflow can cause a buffer overflow due to lack of table length check in the...CVE-2020-111277.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 moreu'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to...CVE-2020-111235.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm qcm4290 firmware, qcs4290 firmware +29 more +31 moreu'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of...CVE-2020-111217.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +27 more +29 moreu'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the...CVE-2020-36907.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 moreu'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...CVE-2020-36847.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 moreu'Buffer overflow can happen as part of SIP message packet processing while storing values in...CVE-2020-36739.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 moreu'Buffer overflow occurs while processing SIP message packet due to lack of check of index...CVE-2020-36549.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check'...CVE-2020-111699.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 moreu'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue...CVE-2020-111647.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length...CVE-2020-111558.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +9 more +11 moreu'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of...CVE-2020-111548.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 moreu'Array index underflow issue in adsp driver due to improper check of channel id before used as...CVE-2020-11174Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8053 firmware +31 more +33 moreu'Two threads running simultaneously from user space can lead to race condition in fastRPC driver...CVE-2020-11173Fix available7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 moreu'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events...CVE-2020-11162Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 moreu'Out of bound access can happen in MHI command process due to lack of check of channel id value...CVE-2020-11125Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +15 more +17 moreu'During execution after Address Space Layout Randomization is turned on for QTEE, part of code...CVE-2020-36795.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 moreu'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon...CVE-2020-111357.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreu'Out of bounds memory access during memory copy while processing Host command' in Snapdragon...CVE-2020-36667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 moreu'Information disclosure issue occurs as in current logic Secure Touch session is released...CVE-2020-36445.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreu'Information disclosure issue can occur due to partial secure display-touch session tear-down'...CVE-2020-36435.5 Medium
- qualcomm apq8009, apq8017, apq8053 +128 more +130 moreu'Channel name string which has been read from shared memory is potentially subjected to string...CVE-2020-36227.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check to ensure that the TX read index & RX write index that are read from shared...CVE-2020-36215.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check of integer overflow while doing a round up operation for data read from shared...CVE-2020-36205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 moreu'Possible out of bound access while copying the mask file content into the buffer without...CVE-2020-111287.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, qualcomm apq8098 firmware, bitra firmware +8 more +10 moreu'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary...CVE-2020-111225.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +23 more +25 moreu'While processing SMCInvoke asynchronous message header, message count is modified leading to a...CVE-2019-141197.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Information disclosure issue occurs as in current logic as secure touch is released without...CVE-2019-141155.5 Medium
- Show moreLoading…