SF
Product
Sdm429 Firmware
192
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 75High 103Medium 14Low 0
Watch
Add Sdm429 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5871 | 6.5 | Sep 20 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD… Affected: All versions, or not specified |
| CVE-2019-10482 | 5.9 | Dec 18 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3643 | 5.5 | Sep 8 | u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3621 | 5.5 | Sep 8 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential… Affected: All versions, or not specified |
| CVE-2020-3620 | 5.5 | Sep 8 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information… Affected: All versions, or not specified |
| CVE-2019-14115 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while… Affected: All versions, or not specified |
| CVE-2019-14067 | 5.5 | Jun 2 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue Affected: All versions, or not specified |
| CVE-2019-14007 | 5.5 | Apr 16 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10483 | 5.5 | Apr 16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10561 | 5.5 | Jan 21 | Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10513 | 5.5 | Dec 18 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2318 | 5.5 | Nov 21 | Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-2295 | 5.5 | Nov 21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code Affected: All versions, or not specified |
| CVE-2017-18302 | 4.7 | Sep 20 | In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630,… Affected: All versions, or not specified |
Showing 14