Skip to contentQualcomm Qca8337 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 moreMemory corruption occurs while processing command received from HLOS due to improper length check...CVE-2022-220668.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +143 more +145 moreMemory corruption in audio due to lack of check of invalid routing address into APR Routing table...CVE-2022-220707.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +57 more +59 morePotential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid...CVE-2022-220677.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 moreAn out-of-bounds read can occur while parsing a server certificate due to improper length check...CVE-2022-220628.2 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +31 more +33 moreOut of bounds writing is possible while verifying device IDs due to improper length check before...CVE-2022-220617.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +166 more +168 moreA null pointer dereference may potentially occur during RSA key import in Snapdragon Auto,...CVE-2021-351356.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +108 more +110 moreOut of bound write in DSP service due to improper bound check for response buffer size in...CVE-2021-351328.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +99 more +101 moreNon-secure region can try modifying RG permissions of IO space xPUs due to improper input...CVE-2021-351229.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 morePossible authentication bypass due to improper order of signature verification and hashing in the...CVE-2021-350977.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +124 more +126 moreDenial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto,...CVE-2022-25670Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6174a firmware +63 more +65 morePossible integer overflow and memory corruption due to improper validation of buffer size sent to...CVE-2022-25656Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +110 more +112 moreImproper validation of backend id in PCM routing process can lead to memory corruption in...CVE-2022-22080Fix available8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +34 more +36 moreUse after free in the synx driver issue while performing other functions during multiple...CVE-2021-35133Fix available6.7 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, ipq5010 firmware +43 more +45 moreMemory corruption in BT controller due to improper length check while processing vendor specific...CVE-2021-351297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +174 more +176 morePossible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in...CVE-2021-351049.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +94 more +96 moreLack of MBN header size verification against input buffer can lead to memory corruption in...CVE-2021-303508.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +139 more +141 moreImproper access control sequence for AC database after memory allocation can lead to possible...CVE-2021-303498.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a...CVE-2021-303479.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +145 more +147 moreImproper authorization of a replayed LTE security mode command can lead to a denial of service in...CVE-2021-303447.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...CVE-2021-303439.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +118 more +120 moreImproper buffer size validation of DSM packet received can lead to memory corruption in...CVE-2021-303419.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreReachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in...CVE-2021-303407.5 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6391 firmware +53 more +55 moreReading PRNG output may lead to improper key generation due to lack of buffer validation in...CVE-2021-303399.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +145 more +147 moreXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX in Snapdragon Auto, Snapdragon Compute, Snapdragon...CVE-2021-302818.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, ar8031 firmware +89 more +91 morePossible use after free when process shell memory is freed using IOCTL munmap call and process...CVE-2022-22071In KEV8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 moreImproper memory allocation during counter check DLM handling can lead to denial of service in...CVE-2021-350967.5 High
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +39 more +41 morePossible null pointer access due to improper validation of system information message to be...CVE-2021-350877.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible buffer over read due to improper validation of SIB type when processing a NR system...CVE-2021-350867.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +105 more +107 morePossible memory leak due to improper validation of certificate chain length while parsing server...CVE-2021-350787.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +55 more +57 morePossible null pointer dereference due to improper validation of RRC connection reconfiguration...CVE-2021-350767.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 morePossible assertion due to improper validation of rank restriction field in Snapdragon Auto,...CVE-2021-350737.5 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +36 more +38 moreImproper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition...CVE-2021-351117.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +66 more +68 morePossible buffer overflow due to lack of validation for the length of NAI string read from EFS in...CVE-2021-351027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +172 more +174 morePossible out of bound read due to improper validation of certificate chain in SSL or Internet key...CVE-2021-350838.2 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 moreImproper handling between export and release functions on the same handle from client can lead to...CVE-2021-35120Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +81 more +83 morePotential out of Bounds read in FIPS event processing due to improper validation of the length...CVE-2021-35119Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 moreAn out-of-bounds write can occur due to an incorrect input check in the camera driver in...CVE-2021-35118Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +114 more +116 morekernel event may contain unexpected content which is not generated by NPU software in...CVE-2022-22068Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +165 more +167 moreOut of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto,...CVE-2022-22065Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +160 more +162 morePossible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto...CVE-2022-22064Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, ar8035 firmware +78 more +80 moreUse after free in graphics fence due to a race condition while closing fence file descriptor and...CVE-2022-22057Public exploitFix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +81 more +83 moreProcessing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to...CVE-2021-35092Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +68 more +70 morePossible buffer overflow due to lack of buffer length check during management frame Rx handling...CVE-2021-35085Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +90 more +92 morePossible out of bound read due to lack of length check of data length for a DIAG event in...CVE-2021-35084Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 moreImproper validation of buffer size input to the EFS file can lead to memory corruption in...CVE-2021-303337.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon...CVE-2021-303327.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, fsm10055 firmware +75 more +77 morePossible buffer overflow due to improper data validation of external commands sent via DIAG...CVE-2021-303315.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon...CVE-2021-303297.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +46 more +48 morePossible assertion due to improper validation of invalid NR CSI-IM resource configuration in...CVE-2021-303287.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +109 more +111 moreImproper handling of permissions of a shared memory region can lead to memory corruption in...CVE-2021-19429.3 Critical
- Show moreLoading…