CVSS: 7.2EPSS: 0%CPEs: 668EXPL: 0CVE-2020-11308
https://notcve.org/view.php?id=CVE-2020-11308
17 Mar 2021 — Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Un desbordamiento del búfer ocurre cuando se intenta convertir una cadena ASCII en una cadena Unicode si el tamaño real es superior al requerido en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-129: Improper Validation of Array Index •
CVSS: 10.0EPSS: 0%CPEs: 762EXPL: 0CVE-2020-11299
https://notcve.org/view.php?id=CVE-2020-11299
17 Mar 2021 — Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Un desbordamiento del búfer puede ocurrir en el video mientras se reproduce el clip no estándar en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.0EPSS: 0%CPEs: 656EXPL: 0CVE-2020-11290
https://notcve.org/view.php?id=CVE-2020-11290
17 Mar 2021 — Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Un uso de la memoria previamente liberada en eventos ioctl de msm debido una carrera entre el registro ioctl y los eventos de cancelación del registro en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 262EXPL: 0CVE-2020-11228
https://notcve.org/view.php?id=CVE-2020-11228
17 Mar 2021 — Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Parte de la región RPM no estaba protegida de xblSec en sí debido a una política inapropiada y conlleva a un acceso sin privilegios en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin •
CVSS: 9.8EPSS: 0%CPEs: 804EXPL: 0CVE-2020-11227
https://notcve.org/view.php?id=CVE-2020-11227
17 Mar 2021 — Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una escritura fuera de límite mientras se analiza el análisis de paquetes RTT/TTY debido a una falta de comprobación del tamaño del búfer antes de copiar en el búfer en los productos Snapdragon ... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-129: Improper Validation of Array Index CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 804EXPL: 0CVE-2020-11226
https://notcve.org/view.php?id=CVE-2020-11226
17 Mar 2021 — Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una lectura de memoria fuera de límite en el módem de datos mientras se descomprimen los datos debido a una falta de comprobación de longitud de desplazamiento en los productos Snapdragon Auto, Snapdragon Compute, Snap... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-125: Out-of-bounds Read CWE-129: Improper Validation of Array Index •
CVSS: 9.1EPSS: 0%CPEs: 550EXPL: 0CVE-2020-11222
https://notcve.org/view.php?id=CVE-2020-11222
17 Mar 2021 — Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile Una lectura excesiva del búfer mientras procesa SMS MT con longitud máxima debido a una comprobación inapropiada de la longitud en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon I... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-125: Out-of-bounds Read •
CVSS: 6.4EPSS: 0%CPEs: 262EXPL: 0CVE-2020-11220
https://notcve.org/view.php?id=CVE-2020-11220
17 Mar 2021 — While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking Mientras se procesan los comandos de almacenamiento SCM, se presenta una ventana de tiempo de comprobación o tiempo de uso en la que un puntero usado podría no ser válido en u... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 5.5EPSS: 0%CPEs: 804EXPL: 0CVE-2020-11221
https://notcve.org/view.php?id=CVE-2020-11221
17 Mar 2021 — Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking Un uso de syscall por parte de una entidad no segura puede permitir una extracción de información de ... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 550EXPL: 0CVE-2020-11218
https://notcve.org/view.php?id=CVE-2020-11218
17 Mar 2021 — Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile Una denegación de servicio en la banda base cuando NW configura LTE beta Offset-RI-Index debido a una falta de comprobación de datos en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago... • https://www.qualcomm.com/company/product-security/bulletins/march-2021-bulletin • CWE-617: Reachable Assertion •