Skip to contentQualcomm Sm8350 Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +82 more +84 moreInformation disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute,...CVE-2022-256656.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 moreMemory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon...CVE-2022-256618.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +91 more +93 moreMemory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute,...CVE-2022-256607.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8096au firmware, aqt1000 firmware +150 more +152 moreInformation disclosure in WLAN due to improper validation of array index while parsing crafted...CVE-2022-256907.5 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morememory corruption in Kernel due to race condition while getting mapping reference in Snapdragon...CVE-2022-220947.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 moreMemory corruption or temporary denial of service due to improper handling of concurrent...CVE-2022-220937.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreMemory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon...CVE-2022-220927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 moreMemory corruption occurs while processing command received from HLOS due to improper length check...CVE-2022-220668.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qca6390 firmware +85 more +87 moreDevices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in...CVE-2022-220697.7 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 moreAn out-of-bounds read can occur while parsing a server certificate due to improper length check...CVE-2022-220628.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +166 more +168 moreA null pointer dereference may potentially occur during RSA key import in Snapdragon Auto,...CVE-2021-351356.2 Medium
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreDue to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur...CVE-2021-351348.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +108 more +110 moreOut of bound write in DSP service due to improper bound check for response buffer size in...CVE-2021-351328.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +99 more +101 moreNon-secure region can try modifying RG permissions of IO space xPUs due to improper input...CVE-2021-351229.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 morePossible authentication bypass due to improper order of signature verification and hashing in the...CVE-2021-350977.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +79 more +81 moreImproper verification of timeout-based authentication in identity credential can lead to invalid...CVE-2021-350947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morePossible hypervisor memory corruption due to TOC TOU race condition when updating address...CVE-2021-350909.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +156 more +158 morePossible out of bound access due to improper validation of function table entries in Snapdragon...CVE-2021-302597.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible buffer overflow due to improper input validation in PDM DIAG command in FTM in...CVE-2021-302557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +70 more +72 morePossible denial of service scenario due to improper input validation of received NAS OTA message...CVE-2021-19827.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, ar8035 firmware +88 more +90 morePossible buffer over read due to improper IE size check of Bearer capability IE in MT setup...CVE-2021-19817.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +120 more +122 morePossible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto,...CVE-2021-19797.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 morePossible heap overflow due to improper length check of domain while parsing the DNS response in...CVE-2021-19759.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...CVE-2021-19737.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...CVE-2021-19249.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 morePossible memory corruption due to Improper handling of hypervisor unmap operations for concurrent...CVE-2021-19217.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +204 more +206 morePossible denial of service scenario can occur due to lack of length check on Channel Switch...CVE-2021-19035.3 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +122 more +124 moreImproper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to...CVE-2021-303027.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +194 more +196 morePossible stack overflow due to improper length check of TLV while copying the TLV to a local...CVE-2021-302888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible memory corruption due to lack of bound check of input index in Snapdragon Auto,...CVE-2021-19597.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +79 more +81 morePossible integer overflow due to improper length check while updating grace period and count...CVE-2021-19138.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 morePossible Integer overflow to buffer overflow issue can occur due to improper validation of input...CVE-2021-302608.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +119 more +121 morePossible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon...CVE-2021-19717.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +136 more +138 moreImproper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled...CVE-2021-19606.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +105 more +107 morePossible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto...CVE-2021-19527.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +96 more +98 moreNull Pointer Dereference may occur due to improper validation while processing crafted SDP body...CVE-2021-19469.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +174 more +176 morePossible null pointer dereference due to lack of validation check for passed pointer during key...CVE-2021-19357.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 moreBuffer overflow occurs in trusted applications due to lack of length check of parameters in...CVE-2021-19097.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +95 more +97 morePossible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon...CVE-2021-19305.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, qualcomm aqt1000 firmware, qca6390 firmware +82 more +84 moreIncorrect pointer argument passed to trusted application TA could result in un-intended memory...CVE-2021-19237.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +203 more +205 moreImproper handling of received malformed FTMR request frame can lead to reachable assertion while...CVE-2021-19537.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +205 more +207 morePossible assertion due to improper verification while creating and deleting the peer in...CVE-2021-19387.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreImproper length check of public exponent in RSA import key function could cause memory corruption...CVE-2021-18908.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 morePossible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto,...CVE-2021-18898.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 moreMemory corruption in key parsing and import function due to double freeing the same heap...CVE-2021-18888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreIncorrect handling of pointers in trusted application key import mechanism could cause memory...CVE-2021-18868.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +184 more +186 moreReachable assertion is possible while processing peer association WLAN message from host and...CVE-2021-19377.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +80 more +82 morePossible integer overflow in RPMB counter due to lack of length check on user provided data in...CVE-2020-113067.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +157 more +159 morePossible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto,...CVE-2020-113047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 morePossible denial of service scenario due to improper handling of group management action frame in...CVE-2021-19257.5 High
- Show moreLoading…