Qualcomm Sdm450 vulnerabilities

• qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 more Improper authorization in Modem CVE-2022-40521 7.5 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 more Stack-based buffer overflow in Modem CVE-2022-33264 7.9 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 more Cryptographic issue in Core CVE-2022-22076 7.1 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 more Reachable assertion in Modem CVE-2022-40504 7.5 HighMay 2, 2023
• qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 more Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics CVE-2023-21666 Fix available 8.4 HighMay 1, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 more Incorrect Type Conversion or Cast in Graphics CVE-2023-21665 Fix available 8.4 HighMay 1, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more Integer overflow or wraparound in WLAN CVE-2022-40532 8.4 HighApril 4, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 more Improper validation of array index in User Identity Module CVE-2022-33302 6.8 MediumApril 4, 2023
• qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 more Improper validation of array index in Modem CVE-2022-33289 6.8 MediumApril 4, 2023
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 more u'When a non standard SIP sigcomp message is received from the network, then there may be chances... CVE-2020-3639 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number... CVE-2020-11196 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned... CVE-2020-11193 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +59 more +61 more u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to... CVE-2020-11168 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 more u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to... CVE-2020-11123 5.5 MediumNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8076 firmware +39 more +41 more u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode... CVE-2020-3703 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 more u'Buffer overflow can happen as part of SIP message packet processing while storing values in... CVE-2020-3673 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 more u'Potential out of bounds read while processing downlink NAS transport message due to improper... CVE-2020-3670 9.1 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 more u'Buffer overflow occurs while processing SIP message packet due to lack of check of index... CVE-2020-3654 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 more u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue... CVE-2020-11164 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8076 firmware +15 more +17 more u'Lack of handling unexpected control messages while encryption was in progress can terminate the... CVE-2020-11157 7.5 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 more u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events... CVE-2020-11162 Fix available 7.8 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 more u'Out of bound access can happen in MHI command process due to lack of check of channel id value... CVE-2020-11125 Fix available 7.8 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 more u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport... CVE-2020-3634 9.1 CriticalSeptember 9, 2020
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 more u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon... CVE-2020-11135 7.5 HighSeptember 9, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 more u'Information disclosure issue can occur due to partial secure display-touch session tear-down'... CVE-2020-3643 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +59 more +61 more u'A potential buffer overflow exists due to integer overflow when parsing handler options due to... CVE-2020-3624 7.8 HighSeptember 8, 2020
• qualcomm apq8009, apq8017, apq8053 +128 more +130 more u'Channel name string which has been read from shared memory is potentially subjected to string... CVE-2020-3622 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more u'Lack of check to ensure that the TX read index & RX write index that are read from shared... CVE-2020-3621 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more u'Lack of check of integer overflow while doing a round up operation for data read from shared... CVE-2020-3620 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 more u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to... CVE-2020-3619 7.0 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 more u'Possible out of bound access while copying the mask file content into the buffer without... CVE-2020-11128 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 more u'Information disclosure issue occurs as in current logic as secure touch is released without... CVE-2019-14115 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +68 more +70 more u'Heap overflow in diag command handler due to lack of check of packet length received from user'... CVE-2019-14074 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 more u'Accessing an uninitialized data structure could result in partially copying of contents and... CVE-2019-14052 9.8 CriticalSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +62 more +64 more u'Lack of check for integer overflow for round up and addition operations result into memory... CVE-2019-13999 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less... CVE-2019-13998 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of integer overflow check for addition of fragment size and remaining size that are read... CVE-2019-13995 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of check that the current received data fragment size of a particular packet that are read... CVE-2019-13994 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 more u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of... CVE-2019-10615 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, mdm9205 firmware +9 more +11 more u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute,... CVE-2018-13903 8.1 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, kamorta firmware +26 more +28 more u'Out of bound access can happen in MHI command process due to lack of check of command channel... CVE-2020-3656 Fix available 7.8 HighSeptember 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +67 more +69 more u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access... CVE-2019-10527 Fix available 7.8 HighSeptember 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, apq8098 firmware +20 more +22 more u'Calling thread may free the data buffer pointer that was passed to the callback and later when... CVE-2020-11120 Fix available 7.8 HighAugust 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 more u'Information exposure issues while processing IE header due to improper check of beacon IE frame... CVE-2020-11118 Fix available 7.5 HighAugust 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +47 more +49 more u'Possible out of bound write while processing association response received from host due to... CVE-2020-11116 Fix available 9.8 CriticalAugust 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 more u'Buffer over read occurs while processing information element from beacon due to lack of check... CVE-2020-11115 Fix available 7.5 HighAugust 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 more Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper... CVE-2020-3688 9.8 CriticalJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096 firmware +55 more +57 more Out of bounds read can happen in diag event set mask command handler when user provided length in... CVE-2019-14101 7.1 HighJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +26 more +28 more Device misbehavior may be observed when incorrect offset, length or number of buffers is passed... CVE-2019-14099 7.8 HighJuly 30, 2020
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +29 more +31 more Array out of bound access can occur in display module due to lack of bound check on input parcel... CVE-2019-14093 7.8 HighJuly 30, 2020
• Show olderLoading…