Skip to contentQualcomm Sm4350 vulnerabilities
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +183 more +185 moreInformation exposure in KernelCVE-2022-405237.1 High
- qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 moreImproper authorization in ModemCVE-2022-405217.5 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +240 more +242 moreDouble free in CoreCVE-2022-405078.4 High
- qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 moreStack-based buffer overflow in ModemCVE-2022-332647.9 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, qca6390 firmware +72 more +74 moreReachable assertion in ModemCVE-2022-332517.5 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, qca6420 firmware +47 more +49 moreBuffer copy without checking the size of input in FM HostCVE-2022-332306.7 Medium
- qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 moreCryptographic issue in CoreCVE-2022-220767.1 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +88 more +90 moreReachable Assertion in ModemCVE-2022-220607.5 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +180 more +182 moreImproper Access control in GPU SubsystemCVE-2023-21670Fix available7.8 High
- qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +145 more +147 moreImproper Input Validation in AudioCVE-2023-21657Fix available7.8 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +126 more +128 moreImproper Input Validation in WLAN HOSTCVE-2023-21656Fix available7.8 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 moreReachable assertion in ModemCVE-2022-405047.5 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +80 more +82 moreReachable assertion in ModemCVE-2022-405087.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, qca6390 firmware +66 more +68 moreReachable assertion in ModemCVE-2022-341447.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, csra6620 firmware +79 more +81 moreNull pointer dereference in ModemCVE-2022-333057.5 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 moreIncorrect Type Conversion or Cast in GraphicsCVE-2023-21665Fix available8.4 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 moreInteger overflow or wraparound in WLANCVE-2022-405328.4 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 moreImproper validation of array index in User Identity ModuleCVE-2022-333026.8 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +86 more +88 moreUse after free in ModemCVE-2022-332986.7 Medium
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +112 more +114 moreInteger overflow to buffer overflow in ModemCVE-2022-332965.9 Medium
- qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 moreImproper validation of array index in ModemCVE-2022-332896.8 Medium
- qualcomm ar8035 firmware, qca6391 firmware, qca6595au firmware +40 more +42 moreTime-of-check time-of-use race condition in ModemCVE-2022-332707.5 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8909 firmware +217 more +219 moreDouble free in CoreCVE-2022-332319.3 Critical
- qualcomm 8905 firmware, 8909 firmware, 8953 firmware +183 more +185 moreBuffer over-read in Bluetooth Host.CVE-2022-40503Fix available8.2 High
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +234 more +236 moreAn improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute,...CVE-2020-112608.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +424 more +426 moreOut of bound read will happen if EAPOL Key length is less than expected while processing NAN...CVE-2020-112417.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +400 more +402 morePossible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in...CVE-2020-112387.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, pm3003a firmware +266 more +268 morePossible heap overflow while parsing NAL header due to lack of check of length of data received...CVE-2020-111829.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +285 more +287 moreTrusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical...CVE-2020-111787.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +253 more +255 moreMemory corruption due to buffer overflow while copying the message provided by HLOS into buffer...CVE-2020-111657.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +313 more +315 moreOut of bound read access in hypervisor due to an invalid read access attempt by passing invalid...CVE-2020-36646.0 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 moreArithmetic overflow can happen while processing NOA IE due to improper error handling in...CVE-2020-112967.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000, ar8031 +327 more +329 moreAllowing RTT frames to be linked with non randomized MAC address by comparing the sequence...CVE-2020-112877.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +377 more +379 moreA buffer overflow can occur when playing an MKV clip due to lack of input validation in...CVE-2020-112839.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +345 more +347 moreAllowing RTT frames to be linked with non randomized MAC address by comparing the sequence...CVE-2020-112817.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +410 more +412 moreDenial of service while processing fine timing measurement request (FTMR) frame with reserved...CVE-2020-112807.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +375 more +377 morePossible denial of service while handling host WMI command due to improper validation in...CVE-2020-112787.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +512 more +514 morePossible buffer over read while processing P2P IE and NOA attribute of beacon and probe response...CVE-2020-112769.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +469 more +471 morePossible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE...CVE-2020-112759.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +413 more +415 morePossible denial of service due to RTT responder consistently rejects all FTMR by transmitting...CVE-2020-112707.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8016 firmware +517 more +519 morePossible memory corruption and information leakage in sub-system due to lack of check for...CVE-2020-112047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +299 more +301 moreKey material used for TZ diag buffer encryption and other data related to log buffer is not wiped...CVE-2020-111986.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8016 firmware +391 more +393 moreOut of bound write and read in TA while processing command from NS side due to improper length...CVE-2020-111957.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +227 more +229 morePossible out of bound access in TA while processing a command from NS side due to improper length...CVE-2020-111947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +423 more +425 moreImproper access control when using mmap with the kgsl driver with a special offset value that can...CVE-2020-11282Fix available7.8 High
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm pm3003a firmware, pm4250 firmware +159 more +161 morePossible race condition during async fastrpc session after sending RPC message due to the fastrpc...CVE-2020-11277Fix available7.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +367 more +369 moreBuffer over read can happen in video driver when playing clip with atomsize having value...CVE-2020-112169.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000, ar8031 +382 more +384 moreAn out of bounds read can happen when processing VSA attribute due to improper minimum required...CVE-2020-112159.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000, ar8031 +347 more +349 moreBuffer over-read while processing NDL attribute if attribute length is larger than expected and...CVE-2020-112147.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +553 more +555 moreOut of bound reads might occur in while processing Service descriptor due to improper validation...CVE-2020-112139.8 Critical
- Show moreLoading…