CVE-2020-11293
Published May 7, 2021Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snap…
Vendor/product archive
qualcomm / csrb31024_firmware CVEs
Beta · best-effort289 CVEs tagged to qualcomm / csrb31024_firmware — 36 Critical, 206 High, 47 Medium, 0 Low, 0 Unrated.
CVE-2020-11288
Published May 7, 2021Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
CVE-2020-11285
Published May 7, 2021Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
CVE-2020-11279
Published May 7, 2021Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap…
CVE-2020-11274
Published May 7, 2021Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri…
CVE-2020-11273
Published May 7, 2021Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to l…
CVE-2020-11255
Published Apr 7, 2021Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, S…
CVE-2020-11252
Published Apr 7, 2021Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2020-11251
Published Apr 7, 2021Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2020-11237
Published Apr 7, 2021Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
CVE-2020-11236
Published Apr 7, 2021Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec…
CVE-2020-11309
Published Mar 17, 2021Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
CVE-2020-11308
Published Mar 17, 2021Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi…
CVE-2020-11290
Published Mar 17, 2021Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag…
CVE-2020-11227
Published Mar 17, 2021Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-11226
Published Mar 17, 2021Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2020-11222
Published Mar 17, 2021Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-11221
Published Mar 17, 2021Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to…
CVE-2020-11218
Published Mar 17, 2021Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-11199
Published Mar 17, 2021HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11192
Published Mar 17, 2021Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-11190
Published Mar 17, 2021Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra…
CVE-2020-11189
Published Mar 17, 2021Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra…
CVE-2020-11188
Published Mar 17, 2021Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra…
CVE-2020-11186
Published Mar 17, 2021Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdrag…
Showing 251-275 of 289 CVEsPage 11 of 12