MF
Product
Msm8937 Firmware
On CISA KEVExploited in the wild
222
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 92High 109Medium 21Low 0
Watch
Add Msm8937 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11261 In wildKEV | 7.8 | Jun 9 | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2022-40510 | 9.8 | Aug 8 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder Affected: All versions, or not specified |
| CVE-2022-25718 | 9.8 | Oct 19 | Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics… Affected: All versions, or not specified |
| CVE-2022-25668 | 9.8 | Sep 2 | Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25659 | 9.8 | Sep 2 | Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-22087 | 9.8 | Jun 14 | memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1975 | 9.8 | Nov 12 | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1920 | 9.8 | Sep 8 | Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1919 | 9.8 | Sep 8 | Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1916 | 9.8 | Sep 8 | Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11307 | 9.8 | Jul 13 | Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11279 | 9.8 | May 7 | Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11299 | 9.8 | Mar 17 | Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11227 | 9.8 | Mar 17 | Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11192 | 9.8 | Mar 17 | Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11272 | 9.8 | Feb 22 | Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in… Affected: All versions, or not specified |
| CVE-2020-3639 | 9.8 | Nov 12 | u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11196 | 9.8 | Nov 12 | u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11193 | 9.8 | Nov 12 | u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-3703 | 9.8 | Nov 2 | u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link… Affected: All versions, or not specified |
| CVE-2020-11116 | 9.8 | Sep 8 | u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14052 | 9.8 | Sep 8 | u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3699 | 9.8 | Jul 30 | Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3698 | 9.8 | Jul 30 | Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3688 | 9.8 | Jul 30 | Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-3663 | 9.8 | Jun 22 | Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-3661 | 9.8 | Jun 22 | Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-3614 | 9.8 | Jun 22 | Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-14080 | 9.8 | Jun 22 | Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-14073 | 9.8 | Jun 22 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard… Affected: All versions, or not specified |
| CVE-2019-14062 | 9.8 | Jun 22 | Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14127 | 9.8 | Apr 16 | Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10609 | 9.8 | Apr 16 | Out of bound write can happen due to lack of check of array index value while calculating it Affected: All versions, or not specified |
| CVE-2019-10589 | 9.8 | Apr 16 | Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10588 | 9.8 | Apr 16 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow Affected: All versions, or not specified |
| CVE-2019-2317 | 9.8 | Mar 5 | The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2019-14095 | 9.8 | Mar 5 | Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10594 | 9.8 | Mar 5 | Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-10593 | 9.8 | Mar 5 | Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-10587 | 9.8 | Mar 5 | Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2019-10586 | 9.8 | Mar 5 | Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10526 | 9.8 | Mar 5 | Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10590 | 9.8 | Feb 7 | Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-14017 | 9.8 | Jan 21 | Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14016 | 9.8 | Jan 21 | Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2019-14013 | 9.8 | Jan 21 | While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14006 | 9.8 | Jan 21 | Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14005 | 9.8 | Jan 21 | Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14004 | 9.8 | Jan 21 | Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2019-10611 | 9.8 | Jan 21 | Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
