Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-09	CVE-2021-1962	Classic Buffer Overflow vulnerability in Qualcomm products Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking local low complexity qualcomm CWE-120	6.7
2021-09-08	CVE-2021-1928	Out-of-bounds Read vulnerability in Qualcomm products Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking low complexity qualcomm CWE-125	6.1
2021-06-09	CVE-2020-11265	Out-of-bounds Read vulnerability in Qualcomm products Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking local low complexity qualcomm CWE-125	5.5
2021-06-09	CVE-2020-11266	Unspecified vulnerability in Qualcomm products Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking local low complexity qualcomm	6.5