Improper access control

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8096AU, APQ8098,...

Buffer overflow

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

Buffer overflow

u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a crafted Link Layer packetEquivalent to CVE-2019-17060,CVE-2019-17061 and CVE-2019-17517 in Sweyntooth paper' in Snapdragon Compute, Snapdragon Consumer IOT,...

Design/Logic Flaw

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

Buffer overflow

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti,...

CVE-2020-3704

CVE-2020-3704 describes a vulnerability in Bluetooth Low Energy where processing an invalid connection request PDU (nonstandard interval/timeout of 0) from a central device may cause the peripheral to enter a deadlock state. The entry notes this CVE is equivalent to CVE-2019-19193 from the Sweynt...

CVE-2020-3704

u'While processing invalid connection request PDU which is nonstandard interval or timeout is 0 from central device may lead peripheral system enter into dead lock state.This CVE is equivalent to InvalidConnectionRequestCVE-2019-19193 mentioned in sweyntooth paper' in Snapdragon Auto, Snapdragon...

CVE-2020-3696

CVE-2020-3696 describes a use-after-free in the IP cracker (ipcrtr) when installing a new security rule since the old one is deleted but could still be in use. Affected families include Snapdragon Auto/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables and Snapdragon Wired Infrastructure ...

CVE-2020-3703

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central deviceThis CVE is equivalent to Link Layer Length Overfow issue CVE-2019-16336,CVE-2019-17519 and Silent Length Overflow issueCVE-2019-17518 mentioned in...

CVE-2020-3703

The connected Red Hat CVE entries confirm a concrete BLE Link Layer handling flaw: Cypress PSoC 4 BLE component

CVE-2020-3696

u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for particular process' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2020-3694

CVE-2020-3694 affects Qualcomm Snapdragon components (Auto/Compute/Mobile/Voice & Music) with an out-of-range pointer issue caused by an incorrect buffer range check during the execution of qseecom. Affected devices/SoCs include Bitra, Nicobar, Saipan, SM6150, SM8150, SM8250, and SXR2130 under Sn...

CVE-2020-3693

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

CVE-2020-3694

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in Bitra, Nicobar, Saipan, SM6150, SM8150, SM8250, SXR2130...

CVE-2020-3693

Summary: CVE-2020-3693 describes a pointer out-of-range issue caused by an incorrect buffer range check in qseecom, affecting multiple Snapdragon platforms (APQ8009/8017/8053/8098, Bitra, MSM8909W/8996AU, Nicobar, QCM2150, QCS605, Saipan, SDM429W, SDX20, SM6150/8150/8250, SXR2130, etc.). The root...

CVE-2020-3692

CVE-2020-3692 is a buffer overflow in Qualcomm Snapdragon components (Auto, Compute, Consumer IoT, Industrial IoT, Mobile) caused by missing input validation when updating the output buffer for IMEI and Gateway Address from server parameters. Affected platforms include Snapdragon devices like Aga...

CVE-2020-3690

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2020-3692

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Agatti, Kamorta,...

CVE-2020-3684

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2020-3684

CVE-2020-3684 describes a local, privilege-relevant issue in Qualcomm Snapdragon platforms where QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by the XBL Loader and applies them without validation. This affects a wide range of Snapdragon p...