2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-3656 | HIGH | 7.8 | 0.2% | Sep 9, 2020 | Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI... |
| CVE-2020-3634 | CRITICAL | 9.1 | 1.1% | Sep 9, 2020 | u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdrago... |
| CVE-2020-3617 | HIGH | 7.1 | 0.2% | Sep 9, 2020 | u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing ... |
| CVE-2020-11135 | HIGH | 7.5 | 0.7% | Sep 9, 2020 | u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer ... |
| CVE-2020-11129 | HIGH | 7.8 | 0.2% | Sep 9, 2020 | u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail ... |
| CVE-2020-11124 | HIGH | 7.8 | 0.2% | Sep 9, 2020 | u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max clien... |
| CVE-2020-4698 | MEDIUM | 5.4 | 0.6% | Sep 8, 2020 | IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored... |
| CVE-2020-4516 | MEDIUM | 5.4 | 0.8% | Sep 8, 2020 | IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-... |
| CVE-2020-3702 | MEDIUM | 6.5 | 0.3% | Sep 8, 2020 | u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi... |
| CVE-2020-3675 | CRITICAL | 9.8 | 1.1% | Sep 8, 2020 | u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' ... |
| CVE-2020-3669 | CRITICAL | 9.8 | 1.1% | Sep 8, 2020 | u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Sna... |
| CVE-2020-3668 | CRITICAL | 9.8 | 1.1% | Sep 8, 2020 | u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while par... |
| CVE-2020-3667 | CRITICAL | 9.8 | 1.1% | Sep 8, 2020 | u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in... |
| CVE-2020-3666 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, ... |
| CVE-2020-3648 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Sn... |
| CVE-2020-3647 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, S... |
| CVE-2020-3646 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Sna... |
| CVE-2020-3644 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display s... |
| CVE-2020-3643 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snap... |
| CVE-2020-3640 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in inva... |
| CVE-2020-3636 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snap... |
| CVE-2020-3629 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining ... |
| CVE-2020-3624 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage i... |
| CVE-2020-3622 | HIGH | 7.8 | 0.2% | Sep 8, 2020 | u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not va... |
| CVE-2020-3621 | MEDIUM | 5.5 | 0.2% | Sep 8, 2020 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIF... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now