KF
Product
Kamorta Firmware
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 50Medium 9Low 0
Watch
Add Kamorta Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3679 | 5.5 | Sep 9 | u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-3644 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3643 | 5.5 | Sep 8 | u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3621 | 5.5 | Sep 8 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential… Affected: All versions, or not specified |
| CVE-2020-3620 | 5.5 | Sep 8 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information… Affected: All versions, or not specified |
| CVE-2020-11122 | 5.5 | Sep 8 | u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14115 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while… Affected: All versions, or not specified |
| CVE-2019-14025 | 5.5 | Sep 8 | u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to… Affected: All versions, or not specified |
| CVE-2019-14067 | 5.5 | Jun 2 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue Affected: All versions, or not specified |
Showing 9
