SF
Product
Sdx55 Firmware
On CISA KEVExploited in the wild
367
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 62High 244Medium 61Low 0
Watch
Add Sdx55 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-14067 | 5.5 | Jun 2 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue Affected: All versions, or not specified |
| CVE-2019-14007 | 5.5 | Apr 16 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10483 | 5.5 | Apr 16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10513 | 5.5 | Dec 18 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-2336 | 5.5 | Nov 21 | Subsequent use of the CBO listener may result in further memory corruption due to use after free issue Affected: All versions, or not specified |
| CVE-2022-22078 | 4.6 | Oct 12 | Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2021-1901 | 4.6 | Jul 13 | Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &… Affected: All versions, or not specified |
| CVE-2021-1899 | 4.6 | Jul 13 | Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Affected: All versions, or not specified |
| CVE-2021-1898 | 4.6 | Jul 13 | Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &… Affected: All versions, or not specified |
| CVE-2021-1897 | 4.6 | Jul 13 | Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
| CVE-2021-1896 | 4.3 | Jul 13 | Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity Affected: All versions, or not specified |
