Qualcomm Snapdragon Auto Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Snapdragon Auto Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-13913 — CVSS 7.8 (high): Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT…
• CVE-2018-13914 — CVSS 7.8 (high): Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer…
• CVE-2018-5839 — CVSS 7.1 (high): Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute…
• CVE-2018-13912 — CVSS 5.5 (medium): Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…