Vulnérabilités connues pour Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2021-35069 | Improper validation of data length received from DMA buffer can lead to memory corruption | 7.8 Élevée | 11 févr. 2022 |
| CVE-2021-30266 | Possible use after free due to improper memory validation when initializing new interface via Interface add command in… | 6.7 Moyenne | 12 nov. 2021 |
| CVE-2021-1945 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute,… | 7.5 Élevée | 13 juil. 2021 |
| CVE-2020-11304 | Possible out of bound read in DRM due to improper buffer length check | 7.8 Élevée | 9 juin 2021 |
| CVE-2020-11298 | While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared… | 7.8 Élevée | 9 juin 2021 |
| CVE-2020-11178 | Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with… | Non notée | 9 juin 2021 |
| CVE-2020-11252 | Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in… | 7.2 Élevée | 7 avr. 2021 |
| CVE-2020-11221 | Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form… | Non notée | 17 mars 2021 |
| CVE-2020-3664 | Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in… | Non notée | 22 févr. 2021 |
| CVE-2020-11198 | Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to… | Non notée | 22 févr. 2021 |
| CVE-2020-3684 | u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL… | Non notée | 2 nov. 2020 |
| CVE-2020-3690 | u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in… | Non notée | 2 nov. 2020 |
| CVE-2020-3667 | u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in… | Non notée | 8 sept. 2020 |
| CVE-2020-3644 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display… | Non notée | 8 sept. 2020 |
| CVE-2020-3619 | u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation… | Non notée | 8 sept. 2020 |
| CVE-2019-14119 | u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition… | Non notée | 8 sept. 2020 |
| CVE-2019-14076 | Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in… | Non notée | 22 juin 2020 |
| CVE-2019-14077 | Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in… | Non notée | 2 juin 2020 |
| CVE-2019-14043 | Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon… | Non notée | 2 juin 2020 |
| CVE-2019-14042 | Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in… | Non notée | 2 juin 2020 |
| CVE-2019-14116 | Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are… | Non notée | 16 avr. 2020 |
| CVE-2019-14009 | Out of bound memory access while processing TZ command handler due to improper input validation on response length… | Non notée | 16 avr. 2020 |
| CVE-2019-14007 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a… | Non notée | 16 avr. 2020 |
| CVE-2019-10608 | Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display… | Non notée | 16 avr. 2020 |
| CVE-2019-10589 | Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in… | Non notée | 16 avr. 2020 |
Autres produits Qualcomm, Inc.
Snapdragon 997
Android for MSM, Firefox OS for MSM, QRD Android 306
All Qualcomm products 194
Snapdragon Mobile, Snapdragon Wear 132
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear 123
Snapdragon Mobile 114
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 73
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 50
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking 47
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 45
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 41
Snapdragon Automobile, Snapdragon Mobile 39