Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2019-14018 | Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute,… | High (7.8) | 2020-04-16 | Environment Specific |
| CVE-2019-14012 | Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking … | High (7.5) | 2020-04-16 | Environment Specific |
| CVE-2019-14011 | Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/… | Critical (9.1) | 2020-04-16 | Environment Specific |
| CVE-2019-14009 | Out of bound memory access while processing TZ command handler due to improper input validation on response length rece… | High (7.8) | 2020-04-16 | Environment Specific |
| CVE-2019-14007 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a … | Medium (5.5) | 2020-04-16 | Environment Specific |