QF
Product
Qat3514 Firmware
9
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add Qat3514 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11260 | 8.4 | Jun 9 | An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2020-11242 | 7.8 | Apr 7 | User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11223 | 7.8 | Feb 22 | Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2020-11297 | 7.5 | Feb 22 | Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11277 | 7.4 | Feb 22 | Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2020-11161 | 7.1 | Jun 9 | Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11231 | 6.7 | Apr 7 | Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2020-11147 | 6.7 | Feb 22 | Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11230 | 6.4 | Mar 17 | Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto,… Affected: All versions, or not specified |
Showing 9
