Qualcomm Nicobar Firmware vulnerabilities

199 CVEs affecting Qualcomm Nicobar Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3704, published 2020-11-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10581, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-3669, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2019-2271, published 2019-11-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2019-10532, published 2020-01-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2019-2242, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-3673, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3667, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-3675, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-3634, published 2020-09-09. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2020-3668, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

Latest

CVE-2020-3704, published 2020-11-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This CVE is equivalent to…
CVE-2020-3703, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow…
CVE-2020-3694, published 2020-11-02. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in…
CVE-2020-3693, published 2020-11-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2020-3692, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon…
CVE-2020-3690, published 2020-11-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2020-3684, published 2020-11-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3670, published 2020-11-02. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3654, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…