SF
Product
Sxr2130 Firmware
On CISA KEVExploited in the wild
264
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 56High 174Medium 34Low 0
Watch
Add Sxr2130 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11122 | 5.5 | Sep 8 | u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14115 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while… Affected: All versions, or not specified |
| CVE-2019-14025 | 5.5 | Sep 8 | u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to… Affected: All versions, or not specified |
| CVE-2019-14092 | 5.5 | Jun 22 | System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607,… Affected: All versions, or not specified |
| CVE-2019-10626 | 5.5 | Jun 22 | Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2019-14067 | 5.5 | Jun 2 | Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue Affected: All versions, or not specified |
| CVE-2019-14075 | 5.5 | Apr 16 | Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-14007 | 5.5 | Apr 16 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon… Affected: All versions, or not specified |
| CVE-2019-10523 | 5.5 | Apr 16 | Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2019-10483 | 5.5 | Apr 16 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10513 | 5.5 | Dec 18 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2019-10484 | 5.5 | Dec 12 | Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon sequence in… Affected: All versions, or not specified |
| CVE-2019-2336 | 5.5 | Nov 21 | Subsequent use of the CBO listener may result in further memory corruption due to use after free issue Affected: All versions, or not specified |
| CVE-2019-10490 | 5.5 | Nov 21 | Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |