High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-07-25	CVE-2019-2235	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. local low complexity qualcomm CWE-119	7.8
2019-07-22	CVE-2018-13927	Improper Authentication vulnerability in Qualcomm products Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130 local low complexity qualcomm CWE-287	7.8
2019-07-22	CVE-2018-13896	Improper Access Control vulnerability in Qualcomm products XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage.. local low complexity qualcomm CWE-284	7.8