Qualcomm SM8350P Firmware vulnerabilities

10 CVEs affecting Qualcomm SM8350P Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3639, published 2020-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11206, published 2020-11-12. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-11184, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290,…
CVE-2020-3639, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11193, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2020-11168, published 2020-11-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
CVE-2020-11130, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290,…
CVE-2020-3632, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P,…
CVE-2020-11205, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P,…
CVE-2020-11123, published 2020-11-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the…
CVE-2020-11121, published 2020-11-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon…