CVE-2020-11130

CVE-2020-11130 affects Qualcomm Snapdragon WiFi HAL components across multiple Snapdragon families (e.g., QCM4290, SM8250, SDX55, etc.). A root cause is a buffer overflow caused by copying data without validating the destination buffer length, potentially allowing local access to the device memor...

CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting users lock-screen password can be bypassed by performing the standard gatekeeper operations.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

CVE-2020-11123

CVE-2020-11123 describes an information disclosure in the gatekeeper TrustZone throttling mechanism that could bypass brute-force protections on lock-screen passwords in Qualcomm Snapdragon-based devices (various APQ/SDM/MDM families). Connected sources confirm it affects Qualcomm closed-source c...

CVE-2020-11121

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,...

PT-2020-12593

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions QCM6125 through SM8150P Snapdragon Compute versions QCM6125 through SM8150P Snapdragon Consumer IOT versions QCM6125 through SM8150P Snapdragon Industrial IOT versions QCM6125 through SM8150P Snapdragon Mobile versions...

PT-2020-12594

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions QSM8350 Snapdragon Compute versions SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M Snapdragon Mobile versions SM8250, SM8350, SM8350P, SXR2130, SXR2130P Description The issue is related to a...

CVE-2020-8677: Undefined Security Weakness

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-3632: Improper Validation of Array Index

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P...

CVE-2020-8676: Undefined Security Weakness

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4655

Name of the Vulnerable Software and Affected Versions IntelR Visual Compute Accelerator 2, all versions Description The issue is related to improper access control, which may allow a privileged user to potentially enable escalation of privilege via local access. This is due to deficiencies in...

PT-2020-4657

Name of the Vulnerable Software and Affected Versions IntelR Visual Compute Accelerator 2, all versions Description The issue is related to improper access control, which may allow a privileged user to potentially enable denial of service via local access. This could be exploited by an attacker t...

Intel® Visual Compute Accelerator 2 Advisory

Summary: A potential security vulnerability in the Intel® Visual Compute Accelerator 2 may allow escalation of privilege or denial of service. Intel is providing documentation updates to partially mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-8676 Description:...

The Origin Is No More

Over the last 15 years, there's been a paradigm shift. Long gone are the days when you built and managed your own data center, were responsible for the physical hardware and the management overhead, and endured the high capital investment of the build and maintenance. As soon as central cloud...

Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-2356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : libexif (EulerOS-SA-2020-2356)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and...

CVE-2020-3704

u'While processing invalid connection request PDU which is nonstandard interval or timeout is 0 from central device may lead peripheral system enter into dead lock state.This CVE is equivalent to InvalidConnectionRequestCVE-2019-19193 mentioned in sweyntooth paper' in Snapdragon Auto, Snapdragon...

CVE-2020-3703

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central deviceThis CVE is equivalent to Link Layer Length Overfow issue CVE-2019-16336,CVE-2019-17519 and Silent Length Overflow issueCVE-2019-17518 mentioned in...

CVE-2020-11174

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...

CVE-2020-3693

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

CVE-2020-3684

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...