5.1
Medium
CVE-2020-11293 Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer…
Description
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected products and versions
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
The 18 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking →
CVE-2020-11289
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto,…
7.8
High
CVE-2020-11199
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information…
Not rated
CVE-2020-11204
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary…
Not rated
CVE-2020-11170
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header…
Not rated