Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-21	CVE-2019-2303	Out-of-bounds Read vulnerability in Qualcomm products SNDCP module may access array out side its boundary when it receives malformed XID message. network low complexity qualcomm CWE-125 critical	9.8
2019-11-06	CVE-2019-2302	Integer Overflow or Wraparound vulnerability in Qualcomm products While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. network low complexity qualcomm CWE-190 critical	9.8
2018-03-30	CVE-2017-14911	Improper Authentication vulnerability in Qualcomm products In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config. network low complexity qualcomm CWE-287 critical	9.8