CVE-2020-11233

CVE-2020-11233 describes a time-of-check time-of-use race condition in Snapdragon SoCs (Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) while processing partition entries; a newly created buffer was read from MMC without validation. The issue affects...

CVE-2020-11182

CVE-2020-11182: Affects Snapdragon/Qualcomm components where a heap overflow can occur while parsing the NAL header due to missing length validation of user-supplied data. Description explicitly lists Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, and Mobile as impacted. Ro...

CVE-2020-11182

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2020-11165

CVE-2020-11165 : Memory corruption due to a buffer overflow when copying the HLOS message into a buffer without validating its length. Affects Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wired Infrastructure and Networking). Root ca...

CVE-2020-11165

Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

CVE-2020-11161

CVE-2020-11161 involves an out-of-bounds memory access in Qualcomm Snapdragon components when computing alignment for a negative width supplied by external components. Affected are Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Voice & Music stacks. The issue is...

CVE-2020-11160

CVE-2020-11160 describes a resource leakage due to a reference count not being decremented when dci client registration fails. This affects Qualcomm Snapdragon platforms (Auto, Compute, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The vulnerability centers on the dci client re...

CVE-2020-11160

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11159

CVE-2020-11159 is a buffer over-read in Snapdragon/Qualcomm code while processing WPA/RSN IE in beacon and response frames. The flaw occurs when the IE length is shorter than the frame pointer being accessed, potentially affecting multiple Snapdragon product families (Auto, Compute, Connectivity,...

CVE-2020-11134

CVE-2020-11134 affects Qualcomm Snapdragon family (Snapdragon Auto/Compute/Connectivity, etc.). The root cause is insufficient validation of time bitmap length and bit duration fields in NAN management frame attributes, leading to a possible stack out-of-bounds write within NAN ranging setup. The...

CVE-2020-11260: Use of Uninitialized Resource

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2021-9299

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affect...

Weak Password Vulnerability in 300M Giga Super High Power Wireless Router

Sapido Technology Inc is a branded technology company invested by Taiwan Steel Group exclusively for IoT IoT technology, specializing in the design and development of intelligent all-wireless security systems and hardware devices. A weak password vulnerability exists in the 300M Giga Super High...

CVE-2020-11261

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Realtek RTL8710 Buffer Overflow Vulnerability (CNVD-2021-56811)

The Realtek RTL8710 is an IoT microcontroller from Realtek Semiconductor Taiwan, China.The Realtek RTL8710 suffers from a buffer overflow vulnerability that could be exploited by attackers to remotely execute code via the "memcpy" function...

CHIYU IoT services Authentication bypass in telnet server(CVE-2021-31251)

...

Realtek RTL8710 Buffer Overflow Vulnerability

The Realtek RTL8710, an IoT microcontroller from Realtek Semiconductor Taiwan, China, suffers from a buffer overflow vulnerability that could be exploited to send a manual "Encrypted GTK" value as part of a as part of a WPA2 4-way handshake...

Afternoon Cyber Tea: Cybersecurity challenged to meet diversity goals

Organizations often know they need to identify and address their cybersecurity blind spots. They also know the technology exists to help them do that. However, they don’t often understand how to communicate this need within their organization to justify the expense, nor do they know how to share...

Researchers Warn of Critical Bugs Affecting Realtek Wi-Fi Module

A new set of critical vulnerabilities has been disclosed in the Realtek RTL8170C Wi-Fi module that an adversary could abuse to gain elevated privileges on a device and hijack wireless communications. "Successful exploitation would lead to complete control of the Wi-Fi module and potential root...

CHIYU IoT Telnet Authentication Bypass

Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, and SEMAC - all firmware...