Lucene search
+L

796 matches found

Positive Technologies
Positive Technologies
•added 2021/01/21 12:00 a.m.•8 views

PT-2021-9195

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A race condition exists in the HAL layer while processing callback objects received from HIDL due to a lack of synchronization between accessing objects. This issue affects variou...

6.9CVSS5.8AI score0.00133EPSS
SaveExploits0References3
NVD
NVD
•added 2020/11/12 10:15 a.m.•58 views

CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...

7.8CVSS7.9AI score0.00211EPSS
SaveExploits0References1
NVD
NVD
•added 2020/11/12 10:15 a.m.•54 views

CVE-2020-11121

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,...

7.8CVSS8AI score0.00189EPSS
SaveExploits0References1
Prion
Prion
•added 2020/11/12 10:15 a.m.•48 views

Buffer overflow

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,...

4.6CVSS7.9AI score0.00189EPSS
SaveExploits0References1
Prion
Prion
•added 2020/11/12 10:15 a.m.•49 views

Buffer overflow

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...

4.6CVSS7.9AI score0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/11/12 10:00 a.m.•57 views

CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...

7.9AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2020/11/12 10:00 a.m.•80 views

CVE-2020-11130

CVE-2020-11130 affects Qualcomm Snapdragon WiFi HAL components across multiple Snapdragon families (e.g., QCM4290, SM8250, SDX55, etc.). A root cause is a buffer overflow caused by copying data without validating the destination buffer length, potentially allowing local access to the device memor...

7.8CVSS7.9AI score0.00211EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/11/12 10:00 a.m.•83 views

CVE-2020-11121

CVE-2020-11121 describes a possible buffer overflow in the WIFI HAL due to memcpy being used without checking the destination buffer length. Affected products include Qualcomm Snapdragon Auto, Compute, Industrial IOT, and Mobile platforms across multiple SoCs (e.g., QCM4290, QCS4290, QM215, QSM83...

7.8CVSS7.9AI score0.00189EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/11/12 10:00 a.m.•10 views

CVE-2020-11121

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,...

8.5CVSS0.00189EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/11/12 10:00 a.m.•47 views

CVE-2020-11121

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,...

8AI score0.00189EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•10 views

CVE-2020-11130: Buffer Copy without Checking Size of Input

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55,...

7.8CVSS6.1AI score0.00211EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•10 views

CVE-2020-11121: Buffer Copy without Checking Size of Input

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,...

7.8CVSS6AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/11/12 12:00 a.m.•9 views

PT-2020-12561

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150,...

7.8CVSS0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/11/12 12:00 a.m.•5 views

PT-2020-12567

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150,...

7.8CVSS0.00211EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2020/10/02 4:33 p.m.•36 views

Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...

1.3AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/10/02 12:00 a.m.•3 views

PT-2020-21259

Name of the Vulnerable Software and Affected Versions cryptoauthlib versions prior to 3.2.3 Description The issue allows an attacker to masquerade as a device and return malformed packets of arbitrary length, which the protocol stack will write to the stack, potentially causing a crash. This...

5.9AI score
SaveExploits0References3
CNVD
CNVD
•added 2020/09/23 12:00 a.m.•15 views

Google Android elevation of privilege vulnerability (CNVD-2020-53775)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11. The vulnerability stems from the Audio HAL and can be exploited by an attacker to elevate local privileges...

6.7CVSS6.6AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/17 9:15 p.m.•37 views

CVE-2020-0356

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559...

6.7CVSS0.0015EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/17 9:15 p.m.•30 views

Out-of-bounds

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559...

4.6CVSS7.2AI score0.0015EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/17 8:52 p.m.•44 views

CVE-2020-0356

In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559...

7.5AI score0.0015EPSS
SaveExploits0References1
Rows per page
Query Builder