SF
Product
Sm7150 Firmware
by Qualcomm · last CVE Nov 12, 2020
254
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 90High 141Medium 23Low 0
Watch

Add Sm7150 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-3702
6.5
0%
Sep 8
u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information…
Affected: All versions, or not specified
CVE-2019-10482
5.9
1%
Dec 18
Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon…
Affected: All versions, or not specified
CVE-2020-3679
5.5
0%
Sep 9
u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2020-3644
5.5
0%
Sep 8
u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3643
5.5
0%
Sep 8
u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3621
5.5
0%
Sep 8
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential…
Affected: All versions, or not specified
CVE-2020-3620
5.5
0%
Sep 8
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information…
Affected: All versions, or not specified
CVE-2020-11122
5.5
0%
Sep 8
u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2019-14115
5.5
0%
Sep 8
u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while…
Affected: All versions, or not specified
CVE-2019-14025
5.5
0%
Sep 8
u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to…
Affected: All versions, or not specified
CVE-2019-14067
5.5
0%
Jun 2
Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue
Affected: All versions, or not specified
CVE-2019-14075
5.5
0%
Apr 16
Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-14007
5.5
0%
Apr 16
Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon…
Affected: All versions, or not specified
CVE-2019-10523
5.5
0%
Apr 16
Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2019-10483
5.5
0%
Apr 16
Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2019-10513
5.5
0%
Dec 18
Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2019-10545
5.5
0%
Dec 12
Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2019-10484
5.5
0%
Dec 12
Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon sequence in…
Affected: All versions, or not specified
CVE-2019-2336
5.5
0%
Nov 21
Subsequent use of the CBO listener may result in further memory corruption due to use after free issue
Affected: All versions, or not specified
CVE-2019-10490
5.5
0%
Nov 21
Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2017-8252
5.5
0%
Jun 14
Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2018-13885
5.5
0%
May 24
Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
Affected: All versions, or not specified
CVE-2018-12005
5.5
0%
May 24
An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
Affected: All versions, or not specified
Showing 23