Known vulnerabilities in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-25711 | Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon… | 6.7 Medium | Dec 13, 2022 |
| CVE-2022-25685 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon… | 7.5 High | Dec 13, 2022 |
| CVE-2022-25676 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon… | 6.8 Medium | Nov 15, 2022 |
| CVE-2022-33214 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon… | 8.4 High | Oct 17, 2022 |
| CVE-2021-35113 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification… | 7.3 High | Sep 2, 2022 |
| CVE-2020-11223 | Out of bound in camera driver due to lack of check of validation of array index before copying into array in… | Not rated | Feb 22, 2021 |
| CVE-2020-3639 | u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM… | Not rated | Nov 12, 2020 |
| CVE-2020-11175 | u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been… | Not rated | Nov 12, 2020 |
| CVE-2020-3670 | u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of… | Not rated | Nov 2, 2020 |
| CVE-2020-3634 | u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in… | Not rated | Sep 9, 2020 |
| CVE-2018-13903 | u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… | Not rated | Sep 8, 2020 |
| CVE-2020-3635 | Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto,… | Not rated | Jun 22, 2020 |
| CVE-2020-3626 | Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto,… | Not rated | Jun 22, 2020 |
| CVE-2019-14080 | Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in… | Not rated | Jun 22, 2020 |
| CVE-2020-3680 | A race condition can occur when using the fastrpc memory mapping API | Not rated | Jun 2, 2020 |
| CVE-2019-14022 | Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto,… | Not rated | Apr 16, 2020 |
| CVE-2019-14021 | Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for… | Not rated | Apr 16, 2020 |
| CVE-2019-14033 | Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach… | Not rated | Apr 16, 2020 |
| CVE-2019-14020 | Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/… | Not rated | Apr 16, 2020 |
| CVE-2019-14012 | Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking… | Not rated | Apr 16, 2020 |
| CVE-2019-14018 | Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon… | Not rated | Apr 16, 2020 |
| CVE-2019-10625 | Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in… | Not rated | Apr 16, 2020 |
| CVE-2019-14079 | Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped… | Not rated | Mar 5, 2020 |
| CVE-2019-10550 | Buffer Over-read when UE is trying to process the message received form the network without zero termination in… | Not rated | Mar 5, 2020 |
| CVE-2019-10549 | Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in… | Not rated | Mar 5, 2020 |
Other Qualcomm, Inc. products
Snapdragon 997
Android for MSM, Firefox OS for MSM, QRD Android 306
All Qualcomm products 194
Snapdragon Mobile, Snapdragon Wear 132
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear 123
Snapdragon Mobile 114
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 73
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 50
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking 47
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 45
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 41
Snapdragon Automobile, Snapdragon Mobile 39