CVE-2023-28582

Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Fastconnect 6700 and 83 more

CVE-2024-23366

Buffer Over-read in Automotive Autonomy

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8295p and 31 more

CVE-2024-33059

Use After Free in Computer Vision

Memory corruption while processing frame command IOCTL calls.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Fastconnect 6900 Fastconnect 6900 Firmware Fastconnect 7800 and 29 more

CVE-2024-33061

Buffer Over-read in DSP Service

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qcs8550 Qcs8550 Firmware Sw5100 and 15 more

CVE-2024-43063

Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Qam8255p Qam8255p Firmware Qam8295p and 31 more

CVE-2024-23360

Improper Access Control in Graphics Windows

Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Fastconnect 6700 Fastconnect 6700 Firmware Fastconnect 6900 and 23 more

CVE-2024-23363

Buffer Over-read in WLAN Firmware

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Csr8811 and 247 more

CVE-2016-10394

Improper Authentication in Core

Initial xbl_sec revision does not have all the debug policy features and critical checks.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm9206 Mdm9206 Firmware Mdm9607 and 7 more

CVE-2017-11076

Use of Out-of-range Pointer Offset in Video

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Msm8909w Msm8909w Firmware Msm8996au and 51 more

CVE-2017-15832

Buffer overwrite due to improper input validation in WLAN host

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm9206 Mdm9206 Firmware Mdm9607 and 7 more

CVE-2017-17772

Multiple buffer overread vulnerabilities in WLAN

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Sd 450 Sd 450 Firmware Sd 625 and 11 more

CVE-2017-18153

Use After Free in WLAN

A race condition exists in a driver potentially leading to a use-after-free condition.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

9206 Lte Modem 9206 Lte Modem Firmware Apq8017 and 7 more

CVE-2018-11922

Configurations in Android Build

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

215 215 Firmware Mdm9206 and 41 more

CVE-2018-11952

Improper Authentication in TrustZone

An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm9206 Mdm9206 Firmware Mdm9607 and 43 more

CVE-2016-10408

Improper Access Control in Core.

QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

9206 Lte Modem 9206 Lte Modem Firmware Apq8037 and 7 more

CVE-2017-18306

Information Exposure in Camera Driver

Information disclosure due to uninitialized variable.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Sd 450 Sd 450 Firmware Sd 625 and 11 more

CVE-2017-18307

Information Exposure in Kernel

Information disclosure possible while audio playback.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Sd 450 Sd 450 Firmware Sd 625 and 11 more

CVE-2018-5852

Buffer Over-read in IPA

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Mdm9206 Mdm9206 Firmware Mdm9607 and 43 more

CVE-2023-43553

Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Ar8035 Ar8035 Firmware Csr8811 and 259 more

CVE-2022-33263

Use after free in Core

Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qualcomm

Products

Aqt1000 Aqt1000 Firmware Qam8255p and 95 more