Vulnerabilities > Qualcomm > Sc8180X Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-06-02 CVE-2019-14067 Information Exposure Through Discrepancy vulnerability in Qualcomm products
Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue.
local
low complexity
qualcomm CWE-203
5.5
2019-12-18 CVE-2019-10482 Unspecified vulnerability in Qualcomm products
Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
network
high complexity
qualcomm
5.9