Qualcomm SC7180 Firmware vulnerabilities

87 CVEs affecting Qualcomm SC7180 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30327, published 2022-06-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11206, published 2020-11-12. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2019-10574, published 2020-04-16. High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days. Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2020-11207, published 2020-11-12. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2020-3669, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
CVE-2020-3667, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-3675, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-3634, published 2020-09-09. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2020-3668, published 2020-09-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2020-3653, published 2020-04-16. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390,…
CVE-2020-3652, published 2020-04-16. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon…

Latest

CVE-2021-30327, published 2022-06-14. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon…
CVE-2020-3639, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-3632, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P,…
CVE-2020-11132, published 2020-11-12. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2020-11127, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in…
CVE-2020-11123, published 2020-11-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the…
CVE-2020-3704, published 2020-11-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This CVE is equivalent to…
CVE-2020-3692, published 2020-11-02. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon…