AF
Product
Ar8151 Firmware
On CISA KEVExploited in the wild
39
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 17Medium 5Low 0
Watch
Add Ar8151 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11261 In wildKEV | 7.8 | Jun 9 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2021-1905 In wildKEV | 7.8 | May 7 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2020-11269 | 8.8 | Feb 22 | Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11177 | 8.8 | Feb 22 | User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-11239 | 7.8 | Jun 9 | Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-11235 | 7.8 | Jun 9 | Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11289 | 7.8 | May 7 | Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11234 | 7.8 | Apr 7 | When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in… Affected: All versions, or not specified |
| CVE-2020-11309 | 7.8 | Mar 17 | Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11204 | 7.8 | Feb 22 | Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in… Affected: All versions, or not specified |
| CVE-2020-11238 | 7.5 | Jun 9 | Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1925 | 7.5 | May 7 | Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11226 | 7.5 | Mar 17 | Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11296 | 7.5 | Feb 22 | Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11119 | 7.5 | Jan 21 | Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11161 | 7.1 | Jun 9 | Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11262 | 7.0 | Jun 9 | A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue Affected: All versions, or not specified |
Showing 17
