PF
Product
Pm855a Firmware
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 5Low 0
Watch
Add Pm855a Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11198 | 6.7 | Feb 22 | Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-11230 | 6.4 | Mar 17 | Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-11220 | 6.4 | Mar 17 | While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call… Affected: All versions, or not specified |
| CVE-2020-11293 | 6.0 | May 7 | Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-3664 | 6.0 | Feb 22 | Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
Showing 5
