PF
Product
Pm6350 Firmware
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 39Medium 9Low 0
Watch
Add Pm6350 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11147 | 6.7 | Feb 22 | Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11220 | 6.4 | Mar 17 | While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call… Affected: All versions, or not specified |
| CVE-2020-11293 | 6.0 | May 7 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-3664 | 6.0 | Feb 22 | Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11252 | 5.5 | Apr 7 | Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11236 | 5.5 | Apr 7 | Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |