SF
Product
Sdm636 Firmware
242
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 97High 128Medium 17Low 0
Watch
Add Sdm636 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5871 | 6.5 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD… Affected: All versions, or not specified |
| CVE-2019-10482 | 5.9 | Dec 18 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3644 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3643 | 5.5 | Sep 8 | u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3621 | 5.5 | Sep 8 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential… Affected: All versions, or not specified |
| CVE-2020-3620 | 5.5 | Sep 8 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information… Affected: All versions, or not specified |
| CVE-2019-14115 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while… Affected: All versions, or not specified |
| CVE-2019-14067 | 5.5 | Jun 2 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue Affected: All versions, or not specified |
| CVE-2019-14075 | 5.5 | Apr 16 | Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-14007 | 5.5 | Apr 16 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10483 | 5.5 | Apr 16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10561 | 5.5 | Jan 21 | Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10513 | 5.5 | Dec 18 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2295 | 5.5 | Nov 21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code Affected: All versions, or not specified |
| CVE-2017-18301 | 5.5 | Sep 20 | In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD… Affected: All versions, or not specified |
| CVE-2015-9218 | 5.5 | Apr 18 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427,… Affected: All versions, or not specified |
| CVE-2017-18302 | 4.7 | Sep 20 | In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630,… Affected: All versions, or not specified |
Showing 17