Qualcomm 8953 Firmware vulnerabilities

• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 more Reachable assertion in Modem CVE-2022-40504 7.5 HighMay 2, 2023
• qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 more Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics CVE-2023-21666 Fix available 8.4 HighMay 1, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 more Incorrect Type Conversion or Cast in Graphics CVE-2023-21665 Fix available 8.4 HighMay 1, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more Integer overflow or wraparound in WLAN CVE-2022-40532 8.4 HighApril 4, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 more Improper validation of array index in User Identity Module CVE-2022-33302 6.8 MediumApril 4, 2023
• qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 more Improper validation of array index in Modem CVE-2022-33289 6.8 MediumApril 4, 2023
• qualcomm 8905 firmware, 8909 firmware, 8953 firmware +183 more +185 more Buffer over-read in Bluetooth Host. CVE-2022-40503 Fix available 8.2 HighApril 1, 2023
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 more Information disclosure in WLAN due to improper length check while processing authentication... CVE-2022-25719 8.2 HighOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more Cryptographic issue in WLAN due to improper check on return value while authentication handshake... CVE-2022-25718 9.1 CriticalOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +179 more +181 more memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto,... CVE-2022-25687 7.3 HighOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 more Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon... CVE-2022-25720 Fix available 9.8 CriticalOctober 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8052 firmware +108 more +110 more Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto... CVE-2022-25664 Fix available 6.2 MediumOctober 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +90 more +92 more Memory corruption in display due to time-of-check time-of-use race condition during map or unmap... CVE-2022-25696 8.4 HighSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +148 more +150 more Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto... CVE-2022-25688 7.3 HighSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 more Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon... CVE-2022-25686 7.3 HighSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +139 more +141 more Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto,... CVE-2022-25669 7.5 HighSeptember 16, 2022
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +88 more +90 more Information disclosure in video due to buffer over-read while processing avi file in Snapdragon... CVE-2022-25653 6.8 MediumSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +127 more +129 more Improper authorization of a replayed LTE security mode command can lead to a denial of service in... CVE-2022-22091 7.5 HighSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 more Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon... CVE-2022-22074 8.4 HighSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 more Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto,... CVE-2022-25668 7.3 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 more Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in... CVE-2022-25659 7.3 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +143 more +145 more Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in... CVE-2022-25658 7.3 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 more Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has... CVE-2022-25657 7.3 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 more An out-of-bounds read can occur while parsing a server certificate due to improper length check... CVE-2022-22062 8.2 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 more Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto,... CVE-2022-22059 8.4 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +166 more +168 more A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto,... CVE-2021-35135 6.2 MediumSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 more Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in... CVE-2022-25706 Fix available 8.2 HighSeptember 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +124 more +126 more Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto,... CVE-2022-25670 Fix available 7.5 HighSeptember 1, 2022
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +47 more +49 more Memory corruption in synx driver due to use-after-free condition in the synx driver due to... CVE-2022-22095 Fix available 8.4 HighSeptember 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +110 more +112 more Improper validation of backend id in PCM routing process can lead to memory corruption in... CVE-2022-22080 Fix available 8.4 HighAugust 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +77 more +79 more Memory corruption due to use after free issue in kernel while processing ION handles in... CVE-2022-22058 Fix available 8.4 HighJuly 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +145 more +147 more Improper authorization of a replayed LTE security mode command can lead to a denial of service in... CVE-2021-30344 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, ar8031 firmware +89 more +91 more Possible use after free when process shell memory is freed using IOCTL munmap call and process... CVE-2022-22071 In KEV 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +59 more +61 more Improper validation of permissions for third party application accessing Telephony service API... CVE-2021-35079 6.2 MediumJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +80 more +82 more Possible buffer overflow due to improper validation of array index while processing external DIAG... CVE-2021-35072 7.8 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in... CVE-2022-22087 7.3 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +138 more +140 more Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms... CVE-2022-22086 7.3 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto,... CVE-2022-22085 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 more Memory corruption when extracting qcp audio file due to lack of check on data length in... CVE-2022-22084 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +149 more +151 more Denial of service due to memory corruption while extracting ape header from clips in Snapdragon... CVE-2022-22083 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 more Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel... CVE-2022-22082 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +172 more +174 more Possible out of bound read due to improper validation of certificate chain in SSL or Internet key... CVE-2021-35083 8.2 HighJune 14, 2022
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +42 more +44 more An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free... CVE-2021-35121 Fix available 6.7 MediumJune 1, 2022
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 more Improper handling between export and release functions on the same handle from client can lead to... CVE-2021-35120 Fix available 6.7 MediumJune 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 more An out-of-bounds write can occur due to an incorrect input check in the camera driver in... CVE-2021-35118 Fix available 6.7 MediumJune 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +114 more +116 more kernel event may contain unexpected content which is not generated by NPU software in... CVE-2022-22068 Fix available 8.4 HighMay 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +165 more +167 more Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto,... CVE-2022-22065 Fix available 7.5 HighMay 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +160 more +162 more Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto... CVE-2022-22064 Fix available 7.5 HighMay 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, ar8035 firmware +78 more +80 more Use after free in graphics fence due to a race condition while closing fence file descriptor and... CVE-2022-22057 Public exploitFix available 8.4 HighMay 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +84 more +86 more Improper validation of session id in PCM routing process can lead to memory corruption in... CVE-2021-35098 Fix available 6.7 MediumMay 1, 2022
• Show olderLoading…