Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-12	CVE-2021-1924	Information Exposure Through Discrepancy vulnerability in Qualcomm products Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking local low complexity qualcomm CWE-203	5.5
2021-06-09	CVE-2020-11265	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking local low complexity qualcomm CWE-125	5.5
2021-06-09	CVE-2020-11266	Unspecified vulnerability in Qualcomm products Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking local low complexity qualcomm	6.5