S6
Product
SD 636 Firmware
206
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 59High 115Medium 32Low 0
Watch
Add SD 636 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-13886 | 9.8 | May 24 | Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,… Affected: All versions, or not specified |
| CVE-2018-11949 | 9.8 | May 24 | Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2018-11940 | 9.8 | May 24 | Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-11937 | 9.8 | May 24 | Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2018-11930 | 9.8 | May 24 | Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2018-11271 | 9.8 | May 24 | Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11945 | 9.8 | Feb 25 | Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2018-11284 | 9.3 | Jan 18 | Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registration updates with the server in snapdragon mobile and… Affected: All versions, or not specified |
| CVE-2018-13906 | 9.1 | Jun 14 | The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
