High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-11-21	CVE-2019-2315	Unspecified vulnerability in Qualcomm products While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. local low complexity qualcomm	7.8
2019-11-21	CVE-2019-2251	Out-of-bounds Write vulnerability in Qualcomm products If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. local low complexity qualcomm CWE-787	7.8
2019-11-21	CVE-2019-10566	Classic Buffer Overflow vulnerability in Qualcomm products Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR2130 local low complexity qualcomm CWE-120	7.8
2019-11-21	CVE-2019-10486	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8939, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150 local high complexity qualcomm CWE-367	7.0