# CVEs published 2020-09-08

52 CVEs were published on September 8, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-4698](https://cve.now/CVE-2020-4698.md): IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scriptin (CVSS 6.4, IBM Business Process Manager · IBM Business Automation Work…)
- [CVE-2020-4516](https://cve.now/CVE-2020-4516.md): IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. (CVSS 5.4, IBM Business Process Manager · IBM Business Automation Work…)
- [CVE-2020-3702](https://cve.now/CVE-2020-3702.md): u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3669](https://cve.now/CVE-2020-3669.md): u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3675](https://cve.now/CVE-2020-3675.md): u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3667](https://cve.now/CVE-2020-3667.md): u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3668](https://cve.now/CVE-2020-3668.md): u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3648](https://cve.now/CVE-2020-3648.md): u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3666](https://cve.now/CVE-2020-3666.md): u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3644](https://cve.now/CVE-2020-3644.md): u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3646](https://cve.now/CVE-2020-3646.md): u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Sna (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…)
- [CVE-2020-3647](https://cve.now/CVE-2020-3647.md): u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Industrial IOT, Sna…)
- [CVE-2020-3640](https://cve.now/CVE-2020-3640.md): u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLO (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…)
- [CVE-2020-3643](https://cve.now/CVE-2020-3643.md): u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3629](https://cve.now/CVE-2020-3629.md): u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3636](https://cve.now/CVE-2020-3636.md): u'Out of bound writes happen when accessing usage\_table header entry beyond the memory allocated for the header' in Snapdragon Auto, Snapdra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3622](https://cve.now/CVE-2020-3622.md): u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL ter (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3624](https://cve.now/CVE-2020-3624.md): u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3619](https://cve.now/CVE-2020-3619.md): u'Non-secure memory is touched multiple times during TrustZone\\u2019s execution and can lead to privilege escalation or memory corruption' i (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3620](https://cve.now/CVE-2020-3620.md): u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3621](https://cve.now/CVE-2020-3621.md): u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11158](https://cve.now/CVE-2020-11158.md): u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS P (no CVSS, Qualcomm IPS PDF releases prior to IPS System)
- [CVE-2020-3611](https://cve.now/CVE-2020-3611.md): u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon C (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…)
- [CVE-2020-11128](https://cve.now/CVE-2020-11128.md): u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11133](https://cve.now/CVE-2020-11133.md): u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, S (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…)
- [CVE-2020-11120](https://cve.now/CVE-2020-11120.md): u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buff (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11122](https://cve.now/CVE-2020-11122.md): u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, S (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2020-11117](https://cve.now/CVE-2020-11117.md): u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resul (no CVSS, Qualcomm Snapdragon Connectivity, Snapdragon Consumer IOT,…)
- [CVE-2020-11118](https://cve.now/CVE-2020-11118.md): u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, S (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14119](https://cve.now/CVE-2019-14119.md): u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory co (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11115](https://cve.now/CVE-2020-11115.md): u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11116](https://cve.now/CVE-2020-11116.md): u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14115](https://cve.now/CVE-2019-14115.md): u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14117](https://cve.now/CVE-2019-14117.md): u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which result (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…)
- [CVE-2019-14074](https://cve.now/CVE-2019-14074.md): u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14089](https://cve.now/CVE-2019-14089.md): u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14056](https://cve.now/CVE-2019-14056.md): u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Com (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14065](https://cve.now/CVE-2019-14065.md): u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in Snapdragon Auto, Snapdragon Compute, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14025](https://cve.now/CVE-2019-14025.md): u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particul (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-14052](https://cve.now/CVE-2019-14052.md): u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-13998](https://cve.now/CVE-2019-13998.md): u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corrup (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-13999](https://cve.now/CVE-2019-13999.md): u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' i (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-13992](https://cve.now/CVE-2019-13992.md): u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-13994](https://cve.now/CVE-2019-13994.md): u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actua (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-13995](https://cve.now/CVE-2019-13995.md): u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corrup (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10628](https://cve.now/CVE-2019-10628.md): u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in Kernel from user library' in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10629](https://cve.now/CVE-2019-10629.md): u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in Snapdragon Auto, Snapdragon Compute, Snapdra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10596](https://cve.now/CVE-2019-10596.md): u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Snapdragon Auto, Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10615](https://cve.now/CVE-2019-10615.md): u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10527](https://cve.now/CVE-2019-10527.md): u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range whic (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10562](https://cve.now/CVE-2019-10562.md): u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loade (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13903](https://cve.now/CVE-2018-13903.md): u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.