Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-21	CVE-2019-2303	Out-of-bounds Read vulnerability in Qualcomm products SNDCP module may access array out side its boundary when it receives malformed XID message. network low complexity qualcomm CWE-125 critical	9.8
2018-04-11	CVE-2017-18129	Exposure of Resource to Wrong Sphere vulnerability in Qualcomm products In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned by one security domain to be controlled from other domains. network low complexity qualcomm CWE-668 critical	9.8