Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-21	CVE-2020-11150	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables local low complexity qualcomm CWE-119	6.7
2021-01-21	CVE-2020-11149	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Out of bound access due to usage of an out-of-range pointer offset in the camera driver. local low complexity qualcomm CWE-119	6.7
2021-01-21	CVE-2020-11148	Use After Free vulnerability in Qualcomm products Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables local low complexity qualcomm CWE-416	6.7