CVE-2020-3633

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2020-3625

CVE-2020-3625 concerns a stack-out-of-bounds condition in the DSP capabilities query on Qualcomm SoCs. A wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, and Snapdragon Mobile (SM8250, SXR2130) enables the vulnerability. The issue affects Qualcomm com...

CVE-2020-3625

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130...

CVE-2020-3616

CVE-2020-3616 describes a buffer overflow in Qualcomm Snapdragon display code caused by a memory copy using strcpy without length checking. Affected products include Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, and Wearables across APQ8017/8053/8096AU/8098, ...

CVE-2020-3616

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017,...

CVE-2020-3610

Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this object in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO...

CVE-2019-14078

CVE-2019-14078: Out-of-bounds memory access during processing of qpay due to failure to validate the length of the response buffer. Affected components are Qualcomm Snapdragon families (Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wired Infrastructure & Networking) acr...

CVE-2019-14077

CVE-2019-14077 is a memory-about-out-of-bounds issue in Snapdragon SoCs where an ese transmit command can corrupt memory by using a user-supplied Response buffer. Affected products span Qualcomm-based hardware in Snapdragon Auto/Compute/Connectivity/IoT/Industrial IoT, including various Snapdrago...

CVE-2019-14043

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure a...

CVE-2019-14038

CVE-2019-14038 is a buffer over-read in the ADSP parse function caused by a missing check for sufficient data payload in a Qualcomm Snapdragon ADSP command response. Affected are Snapdragon products across multiple lines (Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, We...

PT-2020-17567

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions APQ8009 through SDX55 Snapdragon Compute versions APQ8009 through SDX55 Snapdragon Consumer Electronics Connectivity versions APQ8009 through SDX55 Snapdragon Consumer IOT versions APQ8009 through SDX55 Snapdragon...

CVE-2020-3625: Buffer Copy without Checking Size of Input

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130...

PT-2020-9509

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a failure in buffer management while accessing a handle for HDR blit when color modes are not supported by the display. This affects Snapdragon...

CVE-2019-14087: Use After Free

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605...

CVE-2020-5357

CVE-2020-5357 :Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability. The flaw is exploitable during the administrator execution window via a symlink attack by a locally authenticated, low-privileged user, en...

Another California Data Privacy Law

The California Consumer Privacy Act is a lesson in missed opportunities. It was passed in haste, to stop a ballot initiative that would have been even more restrictive: In September 2017, Alastair Mactaggart and Mary Ross proposed a statewide ballot initiative entitled the "California Consumer...

PT-2020-5939

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Consumer IOT versions affected versions not specified Qualcomm Snapdragon Mobile versions affected versions not specified Affected chipsets include APQ8098,...

CVE-2020-3651

Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2019-14114

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

CVE-2019-14019

Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact EPs bearer REq in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...