Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-21	CVE-2019-2303	Out-of-bounds Read vulnerability in Qualcomm products SNDCP module may access array out side its boundary when it receives malformed XID message. network low complexity qualcomm CWE-125 critical	9.8
2018-04-18	CVE-2016-10442	Improper Access Control vulnerability in Qualcomm products In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code. network low complexity qualcomm CWE-284 critical	9.8