Sd820a
Vendor:
First CVE: Apr 11, 2018 · Active for 8 years
336
Total CVEs
More Total CVEs than 92% of tracked products
112.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
8.3
Avg CVSS
Higher Avg CVSS than 59% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sd820a over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 11, 2018
8 years ago
Most Recent CVE
Nov 26, 2024
607 days ago
CVE Severity & Scoring
Sd820a336 CVEs
12%
48%
40%
All CVEs352,719 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local162 (48.2%)
Network171 (50.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network3 (0.9%)
Attack Complexity
Low325 (96.7%)
High11 (3.3%)
Unknown0 (0.0%)
User Interaction
None329 (97.9%)
Unknown0 (0.0%)
Required7 (2.1%)
Privileges Required
Low160 (47.6%)
High0 (0.0%)
None176 (52.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (336 CVEs).
336 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-10529HIGH Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdr | Nov 6, 2019 | 8.1 | 33 | NO | YES |
CVE-2018-11945CRITICAL Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdrago | Feb 25, 2019 | 9.8 | 32 | NO | NO |
CVE-2019-10538CRITICAL Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdrag | Sep 30, 2019 | 9.8 | 31 | NO | NO |
CVE-2019-2276CRITICAL Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon Consum | Jul 25, 2019 | 9.8 | 31 | NO | NO |
CVE-2018-13924CRITICAL Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, | Jul 22, 2019 | 9.8 | 31 | NO | NO |
CVE-2018-13886CRITICAL Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon | May 24, 2019 | 9.8 | 31 | NO | NO |
CVE-2017-18314CRITICAL In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD | Sep 20, 2018 | 9.8 | 31 | NO | NO |
CVE-2019-2325CRITICAL Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn | Nov 6, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-10539CRITICAL Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Co | Sep 30, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-10509CRITICAL Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In | Sep 30, 2019 | 9.8 | 30 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (336 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
0.3% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (336 CVEs).
Media Mentions
Signals from CVEs in this product scope (336 CVEs).
Top CNAs Publishing CVEs For Sd820a
Top CWEs
Versions
No cataloged versions.