Skip to content

Vulnerabilities of Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Is your version affected?

CVE Summary Score Published
CVE-2020-11293 Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer… 5.1 Medium May 7, 2021
CVE-2020-11289 Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto,… 7.8 High May 7, 2021
CVE-2020-11199 HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information… Not rated Mar 17, 2021
CVE-2020-11204 Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary… Not rated Feb 22, 2021
CVE-2020-11170 Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header… Not rated Feb 22, 2021
CVE-2020-3691 Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon… Not rated Jan 21, 2021
CVE-2020-3686 Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array… Not rated Jan 21, 2021
CVE-2020-3685 Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in… Not rated Jan 21, 2021
CVE-2020-11143 Out of bound memory access during music playback with modified content due to copying data without checking… Not rated Jan 21, 2021
CVE-2020-11140 Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon… Not rated Jan 21, 2021
CVE-2020-11139 Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto,… Not rated Jan 21, 2021
CVE-2020-11138 Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory… Not rated Jan 21, 2021
CVE-2020-11137 Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of… Not rated Jan 21, 2021
CVE-2020-11136 Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized… Not rated Jan 21, 2021
CVE-2020-11123 u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force… Not rated Nov 12, 2020
CVE-2019-14067 Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing… Not rated Jun 2, 2020
CVE-2019-10554 Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication… Not rated Mar 5, 2020
CVE-2019-10552 Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU… Not rated Mar 5, 2020

Other Qualcomm, Inc. products