Ar9580
Vendor:
First CVE: Jun 9, 2021 · Active for 5 years
8
Total CVEs
More Total CVEs than 85% of tracked products
8.0
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 59% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ar9580 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 9, 2021
5 years ago
Most Recent CVE
Nov 12, 2021
1,717 days ago
CVE Severity & Scoring
Ar95808 CVEs
38%
63%
All CVEs352,719 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local8 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low8 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-1909HIGH Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electr | Sep 9, 2021 | 7.8 | 25 | NO | NO |
CVE-2020-11256HIGH Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking | Jun 9, 2021 | 8.8 | 23 | NO | NO |
CVE-2020-11259HIGH Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking | Jun 9, 2021 | 8.8 | 21 | NO | NO |
CVE-2020-11258HIGH Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking | Jun 9, 2021 | 8.8 | 21 | NO | NO |
CVE-2020-11257HIGH Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking | Jun 9, 2021 | 8.8 | 21 | NO | NO |
CVE-2021-1924MEDIUM Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons | Nov 12, 2021 | 5.5 | 19 | NO | NO |
CVE-2020-11266MEDIUM Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking | Jun 9, 2021 | 6.5 | 17 | NO | NO |
CVE-2020-11265MEDIUM Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking | Jun 9, 2021 | 5.5 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Ar9580
Top CWEs
Versions
No cataloged versions.