Qualcomm
Qualcomm Apq8096 Firmware: vulnerabilidades y CVE
Qualcomm Apq8096 Firmware tiene 57 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 35 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE57
Últimos 12 meses0
Críticas35
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-11207 | Alta (7.8) | 1.5% | — | 12 nov 2020 | Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052,… |
| CVE-2020-11196 | Crítica (9.8) | 0.90% | — | 12 nov 2020 | u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
| CVE-2020-11193 | Crítica (9.8) | 0.91% | — | 12 nov 2020 | u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
| CVE-2020-11123 | Media (5.5) | 0.19% | — | 12 nov 2020 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper… |
| CVE-2019-14101 | Alta (7.1) | 0.19% | — | 30 jul 2020 | Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |
| CVE-2020-3614 | Crítica (9.8) | 0.71% | — | 22 jun 2020 | Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… |
| CVE-2019-14073 | Crítica (9.8) | 0.71% | — | 22 jun 2020 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard feedback messages in Snapdragon Auto,… |
| CVE-2019-14062 | Crítica (9.8) | 0.90% | — | 22 jun 2020 | Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
| CVE-2019-14067 | Media (5.5) | 0.19% | — | 2 jun 2020 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
| CVE-2019-14113 | Crítica (9.8) | 0.90% | — | 16 abr 2020 | Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
| CVE-2019-14110 | Crítica (9.8) | 0.90% | — | 16 abr 2020 | Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
| CVE-2019-14033 | Crítica (9.1) | 0.88% | — | 16 abr 2020 | Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
| CVE-2019-14020 | Crítica (9.1) | 0.88% | — | 16 abr 2020 | Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_info/ guti_realloc_cmd in Snapdragon Auto, Snapdragon Compute,… |
| CVE-2019-14019 | Crítica (9.1) | 0.88% | — | 16 abr 2020 | Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact EPs bearer REq in Snapdragon Auto, Snapdragon Compute,… |
| CVE-2019-14018 | Alta (7.8) | 0.20% | — | 16 abr 2020 | Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in… |
| CVE-2019-14011 | Crítica (9.1) | 0.88% | — | 16 abr 2020 | Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify context reject in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
| CVE-2019-14007 | Media (5.5) | 0.22% | — | 16 abr 2020 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
| CVE-2019-10610 | Crítica (9.1) | 0.88% | — | 16 abr 2020 | Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
| CVE-2019-10609 | Crítica (9.8) | 0.91% | — | 16 abr 2020 | Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon… |
| CVE-2019-10588 | Crítica (9.8) | 0.90% | — | 16 abr 2020 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
| CVE-2019-10574 | Alta (7.1) | 1.6% | — | 16 abr 2020 | Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
| CVE-2019-10551 | Crítica (9.1) | 0.88% | — | 16 abr 2020 | String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
| CVE-2019-10483 | Media (5.5) | 0.19% | — | 16 abr 2020 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… |
| CVE-2019-2311 | Crítica (9.8) | 0.90% | — | 5 mar 2020 | Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… |
| CVE-2019-2300 | Crítica (9.8) | 0.90% | — | 5 mar 2020 | Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics… |
| CVE-2019-14098 | Crítica (9.8) | 0.90% | — | 5 mar 2020 | Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… |
| CVE-2019-14097 | Crítica (9.8) | 0.90% | — | 5 mar 2020 | Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer… |
| CVE-2019-14095 | Crítica (9.8) | 0.90% | — | 5 mar 2020 | Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
| CVE-2019-14083 | Crítica (9.8) | 0.96% | — | 5 mar 2020 | While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer… |
| CVE-2019-14071 | Alta (7.8) | 0.22% | — | 5 mar 2020 | Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure ram dumps in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |