AF
Product
Agatti Firmware
by Qualcomm · last CVE Nov 2, 2020
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 10Medium 0Low 0
Watch

Add Agatti Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-3692
9.8
1%
Nov 2
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon…
Affected: All versions, or not specified
CVE-2020-3673
9.8
1%
Nov 2
u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2020-3654
9.8
1%
Nov 2
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3670
9.1
1%
Nov 2
u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2020-3690
7.8
0%
Nov 2
u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-3684
7.8
0%
Nov 2
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2020-3678
7.8
0%
Nov 2
u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' in Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2020-3638
7.8
0%
Nov 2
u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2020-11174
7.8
0%
Nov 2
u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11164
7.8
0%
Nov 2
u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11162
7.8
0%
Nov 2
u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-11125
7.8
0%
Nov 2
u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2020-3704
7.5
1%
Nov 2
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This…
Affected: All versions, or not specified
CVE-2020-11173
7.0
0%
Nov 2
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
Showing 14