Total
475 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-33288 | 1 Qualcomm | 256 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 253 more | 2024-04-12 | N/A | 8.8 HIGH |
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. | |||||
CVE-2022-40512 | 1 Qualcomm | 590 Apq8009, Apq8009 Firmware, Apq8017 and 587 more | 2024-04-12 | N/A | 7.5 HIGH |
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. | |||||
CVE-2023-21664 | 1 Qualcomm | 274 Aqt1000, Aqt1000 Firmware, Ar8035 and 271 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory Corruption in Core Platform while printing the response buffer in log. | |||||
CVE-2023-21657 | 1 Qualcomm | 252 Csra6620, Csra6620 Firmware, Csra6640 and 249 more | 2024-04-12 | N/A | 7.8 HIGH |
Memoru corruption in Audio when ADSP sends input during record use case. | |||||
CVE-2022-40532 | 1 Qualcomm | 706 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8905 and 703 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. | |||||
CVE-2022-33275 | 1 Qualcomm | 518 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 515 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. | |||||
CVE-2022-33278 | 1 Qualcomm | 246 Aqt1000, Aqt1000 Firmware, Ar8035 and 243 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. | |||||
CVE-2022-40503 | 1 Qualcomm | 370 8905, 8905 Firmware, 8909 and 367 more | 2024-04-12 | N/A | 7.5 HIGH |
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. | |||||
CVE-2023-21652 | 1 Qualcomm | 240 Aqt1000, Aqt1000 Firmware, Ar8035 and 237 more | 2024-04-12 | N/A | 7.1 HIGH |
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. | |||||
CVE-2022-40527 | 1 Qualcomm | 198 Ar8035, Ar8035 Firmware, Csr8811 and 195 more | 2024-04-12 | N/A | 7.5 HIGH |
Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. | |||||
CVE-2022-33271 | 1 Qualcomm | 490 Apq8096au, Apq8096au Firmware, Aqt1000 and 487 more | 2024-04-12 | N/A | 7.5 HIGH |
Information disclosure due to buffer over-read in WLAN while parsing NMF frame. | |||||
CVE-2023-21646 | 1 Qualcomm | 108 Ar8035, Ar8035 Firmware, Qca6390 and 105 more | 2024-04-12 | N/A | 7.5 HIGH |
Transient DOS in Modem while processing invalid System Information Block 1. | |||||
CVE-2022-33270 | 1 Qualcomm | 84 Ar8035, Ar8035 Firmware, Qca6391 and 81 more | 2024-04-12 | N/A | 5.9 MEDIUM |
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message. | |||||
CVE-2022-40507 | 1 Qualcomm | 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 481 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory corruption due to double free in Core while mapping HLOS address to the list. | |||||
CVE-2022-40531 | 1 Qualcomm | 568 Apq8009, Apq8009 Firmware, Apq8017 and 565 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. | |||||
CVE-2022-33251 | 1 Qualcomm | 148 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 145 more | 2024-04-12 | N/A | 7.5 HIGH |
Transient DOS due to reachable assertion in Modem because of invalid network configuration. | |||||
CVE-2022-33250 | 1 Qualcomm | 130 Ar8035, Ar8035 Firmware, Qca6390 and 127 more | 2024-04-12 | N/A | 7.5 HIGH |
Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. | |||||
CVE-2023-21651 | 1 Qualcomm | 280 Aqt1000, Aqt1000 Firmware, Ar8031 and 277 more | 2024-04-12 | N/A | 7.8 HIGH |
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. | |||||
CVE-2022-40537 | 1 Qualcomm | 324 Apq8009, Apq8009 Firmware, Apq8009w and 321 more | 2024-04-12 | N/A | 9.8 CRITICAL |
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. | |||||
CVE-2022-40515 | 1 Qualcomm | 318 Apq8009, Apq8009 Firmware, Apq8009w and 315 more | 2024-04-12 | N/A | 9.8 CRITICAL |
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |