2020 CVE Vulnerabilities
21,085 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-11306 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdrag... |
| CVE-2020-11304 | HIGH | 7.1 | 0.2% | Jun 9, 2021 | Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdrago... |
| CVE-2020-11298 | HIGH | 7 | 0.1% | Jun 9, 2021 | While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memo... |
| CVE-2020-11292 | HIGH | 7.8 | 0.8% | Jun 9, 2021 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon A... |
| CVE-2020-11267 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value ... |
| CVE-2020-11262 | HIGH | 7 | 0.1% | Jun 9, 2021 | A race between command submission and destroying the context can cause an invalid context being added to the list leads ... |
| CVE-2020-11261 | HIGH | 7.8 | 1.8% | Jun 9, 2021 | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size ... |
| CVE-2020-11260 | HIGH | 8.4 | 0.2% | Jun 9, 2021 | An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Sn... |
| CVE-2020-11259 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct... |
| CVE-2020-11258 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastruct... |
| CVE-2020-11257 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastruct... |
| CVE-2020-11256 | HIGH | 8.8 | 0.2% | Jun 9, 2021 | Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infras... |
| CVE-2020-11250 | HIGH | 7 | 0.1% | Jun 9, 2021 | Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute,... |
| CVE-2020-11241 | HIGH | 7.5 | 0.6% | Jun 9, 2021 | Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attri... |
| CVE-2020-11240 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is alloc... |
| CVE-2020-11239 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned... |
| CVE-2020-11238 | HIGH | 7.5 | 0.6% | Jun 9, 2021 | Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdrago... |
| CVE-2020-11235 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto... |
| CVE-2020-11233 | HIGH | 7 | 0.1% | Jun 9, 2021 | Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again f... |
| CVE-2020-11178 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with... |
| CVE-2020-11165 | HIGH | 7.8 | 0.2% | Jun 9, 2021 | Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the l... |
| CVE-2020-11161 | HIGH | 7.1 | 0.1% | Jun 9, 2021 | Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external compon... |
| CVE-2020-26516 | HIGH | 8.8 | 0.8% | Jun 8, 2021 | A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger ac... |
| CVE-2020-26515 | HIGH | 7.5 | 0.5% | Jun 8, 2021 | An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The rememb... |
| CVE-2020-25716 | HIGH | 8.1 | 0.8% | Jun 7, 2021 | A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now