Qualcomm APQ8064 Firmware vulnerabilities

32 CVEs affecting Qualcomm APQ8064 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33066, published 2024-03-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10532, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2019-14006, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2019-14005, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2019-10590, published 2020-02-07. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2019-14016, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2019-14013, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2019-14127, published 2020-04-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2019-14114, published 2020-04-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2019-14113, published 2020-04-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2019-14110, published 2020-04-16. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon…

Latest

CVE-2023-33066, published 2024-03-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio while processing RT proxy port register driver.
CVE-2021-1909, published 2021-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…
CVE-2020-11170, published 2021-02-22. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2019-14070, published 2020-04-16. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2019-14098, published 2020-03-05. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2019-14061, published 2020-03-05. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…