CVE-2020-11206

Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610,...

CVE-2020-11205

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR21...

CVE-2020-11202

CVE-2020-11202 concerns a buffer overflow/underflow when typecasting a CPU-passed buffer that is not aligned with the target structure size, affecting Qualcomm Snapdragon components across numerous lines (Auto, Compute, Consumer IOT, Industrial IOT, Mobile) including QCM6125, QCS410/603/605/610/6...

CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P,...

CVE-2020-11201

CVE-2020-11201 targets Qualcomm Snapdragon systems with DSP/Hexagon components. The issue arises from an improper check in a loaded library used for data flowing from the CPU to the DSP, affecting Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, and Mobile families (e.g., QCM6125, QCS410/6...

CVE-2020-11202

Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603...

CVE-2020-11193

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

CVE-2020-11196

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...

CVE-2020-11196

CVE-2020-11196 is a vulnerability where an integer overflow can overflow into a buffer during ASF clip playback when the clip has an unexpected number of codec entries. Reported affects Qualcomm Snapdragon multimedia components across a wide range of SoCs (e.g., APQ8009/9W, APQ8017, APQ8037, APQ8...

CVE-2020-11193

CVE-2020-11193 describes a buffer over-read in Qualcomm/Snapdragon video processing caused by improper typecasting of data returned from atomsize while parsing MKV clips. Affected products cover Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, and related SoCs (e.g., APQ...

CVE-2020-11175

The CVE-2020-11175 entry describes a use-after-free vulnerability in the Bluetooth transport driver where a method may be invoked on an object after it has been deleted due to improper timer handling. Affected products include Qualcomm/closed-source components for Snapdragon platforms (e.g., Snap...

CVE-2020-11168

CVE-2020-11168 is a null-pointer dereference vulnerability affecting a broad list of Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Wearables) across numerous SoCs (APQ8xxx, SDM/SXR families, etc.). The underlying flaw is a null-pointer dereferen...

CVE-2020-11175

u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...

CVE-2020-11168

u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2020-11184

u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M, SM4250, SM4250P,...

CVE-2020-11184

CVE-2020-11184 affects Qualcomm Snapdragon families (e.g., Snapdragon Auto/Compute/Industrial IOT and Snapdragon Mobile across listed SOCs). The issue is a buffer overflow in the video path when parsing an mp4 clip’s esds atom size, which can impact the mp4 parsing component. The CVSS metrics in ...

CVE-2020-11131

CVE-2020-11131 corresponds to a buffer overflow in WMA message processing caused by an integer overflow when processing a command from user space on Snapdragon platforms (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music). Affected components include APQ8009, APQ8053, APQ8096AU, MDM9206/9...

CVE-2020-11132

CVE-2020-11132 is a Qualcomm Snapdragon vulnerability identified in multiple Snapdragon product families (Auto, Compute, IoT, Mobile, etc.). The root cause is a buffer over-read during boot caused by an ignored size check when copying the GUID attribute from a request to the response. This detail...

CVE-2020-11131

u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM925...

CVE-2020-11132

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in...