Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 224

Export CSV
CVE-2023-21651

Incorrect Type Conversion or Cast in Core

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8031 and 277 more
CVE-2023-21626

Improper Authentication in HLOS.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8017 and 368 more
CVE-2023-21625

Buffer Over-read in Network Services

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8017 and 89 more
CVE-2022-33295

Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm8207 Mdm8207 Firmware Mdm9205 and 21 more
CVE-2022-33294

NULL pointer dereference in Modem

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm8207 Mdm8207 Firmware Mdm9205 and 21 more
CVE-2022-33259

Buffer copy without checking the size of input in Modem

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm8207 Mdm8207 Firmware Mdm9205 and 21 more
CVE-2022-33257

Time-of-check time-of-use race condition in Core

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8031 and 277 more
CVE-2022-33228

Buffer over-read in Modem

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm8207 Mdm8207 Firmware Mdm9205 and 21 more
CVE-2022-33223

Null pointer dereference in Modem

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm8207 Mdm8207 Firmware Mdm9205 and 21 more
CVE-2022-25745

Always Incorrect Control Flow Implementation in MODEM

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm9205 Mdm9205 Firmware Qca4004 and 7 more
CVE-2022-25740

Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Mdm8207 Mdm8207 Firmware Mdm9205 and 21 more