S6
Product
SD 636 Firmware
206
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 59High 115Medium 32Low 0
Watch
Add SD 636 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-11820 | 5.5 | Feb 25 | Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2018-11999 | 5.5 | Jan 18 | Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M,… Affected: All versions, or not specified |
| CVE-2017-18326 | 5.5 | Jan 3 | Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650,… Affected: All versions, or not specified |
| CVE-2017-11004 | 5.5 | Jan 3 | A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650,… Affected: All versions, or not specified |
| CVE-2018-13907 | 5.3 | Jun 14 | While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2018-11935 | 5.3 | Feb 25 | Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |