Skip to contentQualcomm Msm8208 Firmware vulnerabilities
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +181 more +183 moreInteger Overflow or Wraparound in AudioCVE-2023-285378.4 High
- qualcomm apq8009 firmware, apq8017 firmware, apq8096au firmware +170 more +172 moreInteger Overflow or Wraparound in AudioCVE-2023-226668.4 High
- qualcomm apq8009 firmware, apq8017 firmware, apq8037 firmware +183 more +185 moreImproper Authentication in HLOS.CVE-2023-216267.1 High
- qualcomm apq8009 firmware, apq8017 firmware, apq8037 firmware +44 more +46 moreBuffer Over-read in Network ServicesCVE-2023-216258.2 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +203 more +205 moreBuffer copy without checking size of input in Audio.CVE-2022-405109.8 Critical
- qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +157 more +159 moreDouble free in VideoCVE-2022-405157.3 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +207 more +209 moreMemory Corruption in MODEMCVE-2022-332137.5 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 moreInteger Overflow to Buffer Overflow in ModemCVE-2022-257057.8 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +206 more +208 moreUse of Out-of-range Pointer Offset in MODEMCVE-2022-256948.4 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 moreImproper Validation of Array Index in Bluetooth HOSTCVE-2022-40537Fix available7.3 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +181 more +183 moreInformation Exposure in GraphicsCVE-2022-22075Fix available6.2 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 moreInteger overflow to buffer overflow in User Identity ModuleCVE-2022-332487.8 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 moreConfiguration weakness in modemCVE-2022-332337.8 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +120 more +122 moreInteger overflow to buffer overflow in AudioCVE-2022-332665.9 Medium
- qualcomm apq8009 firmware, ar8031 firmware, csra6620 firmware +90 more +92 moreBuffer over-read in Bluetooth HOSTCVE-2022-33255Fix available8.2 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +148 more +150 moreInteger Overflow to Buffer Overflow in Bluetooth HOSTCVE-2022-22088Fix available9.8 Critical
- qualcomm apq8009 firmware, apq8009w firmware, apq8064au firmware +44 more +46 moreBuffer Over-read in BOOTCVE-2022-22079Fix available4.6 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +77 more +79 moreDenial of service in modem due to reachable assertion while processing reconfiguration message in...CVE-2022-257027.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreMemory corruption in MODEM due to Improper Validation of Array Index while processing GSTK...CVE-2022-256958.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +123 more +125 moreDenial of service in Modem module due to improper authorization while error handling in...CVE-2022-256857.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 moreMemory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command...CVE-2022-256828.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +187 more +189 moreMemory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon...CVE-2022-25743Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +199 more +201 moreMemory corruption in graphics due to buffer overflow while validating the user address in...CVE-2022-25724Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 moreInformation disclosure in WLAN due to improper length check while processing authentication...CVE-2022-257198.2 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 moreCryptographic issue in WLAN due to improper check on return value while authentication handshake...CVE-2022-257189.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +179 more +181 morememory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto,...CVE-2022-256877.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 moreMemory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon...CVE-2022-25720Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8052 firmware +108 more +110 moreInformation disclosure due to exposure of information while GPU reads the data in Snapdragon Auto...CVE-2022-25664Fix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 moreAn out-of-bounds read can occur while parsing a server certificate due to improper length check...CVE-2022-220628.2 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +80 more +82 morePossible buffer overflow due to improper validation of array index while processing external DIAG...CVE-2021-350727.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +172 more +174 morePossible out of bound read due to improper validation of certificate chain in SSL or Internet key...CVE-2021-350838.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 morePossible information exposure and denial of service due to NAS not dropping messages when...CVE-2021-302847.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible buffer overflow due to improper input validation in PDM DIAG command in FTM in...CVE-2021-302557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +161 more +163 morePossible buffer overflow due to improper input validation in factory calibration and test DIAG...CVE-2021-302547.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 morePossible heap overflow due to improper length check of domain while parsing the DNS response in...CVE-2021-19759.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...CVE-2021-19737.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...CVE-2021-19249.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible memory corruption due to lack of bound check of input index in Snapdragon Auto,...CVE-2021-19597.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 morePossible integer and heap overflow due to lack of input command size validation while handling...CVE-2021-302618.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +174 more +176 morePossible null pointer dereference due to lack of validation check for passed pointer during key...CVE-2021-19357.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 moreBuffer overflow occurs in trusted applications due to lack of length check of parameters in...CVE-2021-19097.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 moreInteger underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,...CVE-2021-19209.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreInteger underflow can occur when the RTCP length is lesser than than the actual blocks present in...CVE-2021-19199.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 morePossible buffer underflow due to lack of check for negative indices values when processing user...CVE-2021-19169.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreLoop with unreachable exit condition may occur due to improper handling of unsupported input in...CVE-2021-19147.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +157 more +159 morePossible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto,...CVE-2020-113047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 morePossible buffer overflow in voice service due to lack of input validation of parameters in QMI...CVE-2020-112927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 moreOut of bound write can occur in TZ command handler due to lack of validation of command ID in...CVE-2020-112897.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +398 more +400 moreBuffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is...CVE-2020-112858.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 moreMemory corruption while processing crafted SDES packets due to improper length check in sdes...CVE-2020-112797.5 High
- Show olderLoading…