Qualcomm 8998 Firmware vulnerabilities

• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 more Buffer over-read in WLAN Firmware CVE-2023-33080 7.5 HighDecember 5, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +166 more +168 more Improper Authentication in GPS HLOS Driver CVE-2023-33054 9.1 CriticalDecember 5, 2023
• qualcomm 8098 firmware, 8998 firmware, aqt1000 firmware +69 more +71 more Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer CVE-2023-33024 6.7 MediumDecember 5, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +261 more +263 more Integer Overflow to Buffer Overflow in User Identity Module CVE-2023-33018 7.8 HighDecember 5, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 more Use After Free in DSP Services CVE-2023-33063 In KEVFix available 7.8 HighDecember 1, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +257 more +259 more Buffer Copy Without Checking Size of Input in Audio CVE-2023-33059 Fix available 7.8 HighNovember 1, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +350 more +352 more Buffer Over-read in WLAN Firmware CVE-2023-33027 7.5 HighOctober 3, 2023
• qualcomm 8098 firmware, 8998 firmware, apq8064au firmware +84 more +86 more Buffer Over-read in WLAN HOST CVE-2023-28571 Fix available 6.1 MediumOctober 1, 2023
• qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 more Buffer Copy Without Checking Size of Input in WLAN HAL CVE-2023-28560 7.8 HighSeptember 5, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +181 more +183 more Integer Overflow or Wraparound in Audio CVE-2023-28537 8.4 HighAugust 8, 2023
• qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 more Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics CVE-2023-21666 Fix available 8.4 HighMay 1, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 more Incorrect Type Conversion or Cast in Graphics CVE-2023-21665 Fix available 8.4 HighMay 1, 2023
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8909 firmware +217 more +219 more Double free in Core CVE-2022-33231 9.3 CriticalApril 4, 2023
• qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 more Buffer overflow in sahara protocol while processing commands leads to overwrite of secure... CVE-2021-30327 Public exploit 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +424 more +426 more Out of bound read will happen if EAPOL Key length is less than expected while processing NAN... CVE-2020-11241 7.5 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +400 more +402 more Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in... CVE-2020-11238 7.5 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, pm3003a firmware +266 more +268 more Possible heap overflow while parsing NAL header due to lack of check of length of data received... CVE-2020-11182 9.8 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +285 more +287 more Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical... CVE-2020-11178 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +253 more +255 more Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer... CVE-2020-11165 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8064au firmware +224 more +226 more Out-of-bounds memory access can occur while calculating alignment requirements for a negative... CVE-2020-11161 7.1 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE... CVE-2020-11159 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +389 more +391 more Possible out of bound read while WLAN frame parsing due to lack of check for body and header... CVE-2020-11126 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 more Possible denial of service scenario due to improper handling of group management action frame in... CVE-2021-1925 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 more Buffer overflow can occur due to improper validation of NDP application information length in... CVE-2021-1915 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +371 more +373 more Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon... CVE-2021-1910 7.3 HighMay 7, 2021
• qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 more Possible integer overflow due to improper length check while flashing an image in Snapdragon... CVE-2021-1895 6.8 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, pm215 firmware +242 more +244 more Out of bound write in logger due to prefix size is not validated while prepended to logging... CVE-2020-11294 5.9 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 more Out of bound read can happen in Widevine TA while copying data to buffer from user data due to... CVE-2020-11293 5.1 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 more Out of bound write can occur in TZ command handler due to lack of validation of command ID in... CVE-2020-11289 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +316 more +318 more Out of bound write can occur in playready while processing command due to lack of input... CVE-2020-11288 7.8 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +398 more +400 more Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is... CVE-2020-11285 8.2 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +129 more +131 more Locked memory can be unlocked and modified by non secure boot loader through improper system call... CVE-2020-11284 8.4 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Memory corruption while processing crafted SDES packets due to improper length check in sdes... CVE-2020-11279 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +244 more +246 more Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto,... CVE-2020-11274 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +176 more +178 more Histogram type KPI was teardown with the assumption of the existence of histogram binning info... CVE-2020-11273 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 more Possible use after free due to lack of null check while memory is being freed in FastRPC driver... CVE-2021-1927 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Improper handling of address deregistration on failure can lead to new GPU address allocation... CVE-2021-1906 In KEVFix available 6.2 MediumMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +395 more +397 more Possible use after free due to improper handling of memory mapping of multiple processes... CVE-2021-1905 In KEVFix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 more A possible use-after-free occurrence in audio driver can happen when pointers are not properly... CVE-2021-1891 Fix available 8.4 HighMay 1, 2021
• qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, pm8005 firmware +52 more +54 more Memory corruption due to improper input validation while processing IO control which is... CVE-2021-1892 8.4 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +342 more +344 more Denial of service while processing RTCP packets containing multiple SDES reports due to memory... CVE-2020-11255 7.5 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +308 more +310 more Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to... CVE-2020-11252 7.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer... CVE-2020-11251 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +317 more +319 more Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon... CVE-2020-11247 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8037 firmware +315 more +317 more A double free condition can occur when the device moves to suspend mode during secure playback in... CVE-2020-11246 8.4 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +200 more +202 more Unintended reads and writes by NS EL2 in access control driver due to lack of check of input... CVE-2020-11245 8.4 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 more Out of bound read occurs while processing crafted SDP due to lack of check of null string in... CVE-2020-11191 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +335 more +337 more When sending a socket event message to a user application, invalid information will be passed if... CVE-2020-11234 Fix available 8.4 HighApril 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +379 more +381 more Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto,... CVE-2020-11299 9.8 CriticalMarch 17, 2021
• Show olderLoading…