CVE-2018-13896
- EPSS 0.04%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 03:48:16
XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage.. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C...
- EPSS 0.36%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 03:48:20
Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn...
CVE-2018-13927
- EPSS 0.03%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 03:48:21
Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapd...
CVE-2019-2243
- EPSS 0.05%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 04:40:31
Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Sn...
- EPSS 0.03%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 04:40:33
A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Weara...
CVE-2019-2261
- EPSS 0.04%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 04:40:34
Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob...
CVE-2019-2264
- EPSS 0.04%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 04:40:34
Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 4...
CVE-2019-2269
- EPSS 0.34%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 04:40:35
Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice...
CVE-2019-2277
- EPSS 0.04%
- Published 22.07.2019 14:15:11
- Last modified 21.11.2024 04:40:36
Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405,...
- EPSS 0.66%
- Published 14.06.2019 17:29:02
- Last modified 21.11.2024 04:40:33
An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sna...