Total
130 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-33033 | 1 Qualcomm | 528 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 525 more | 2024-11-21 | N/A | 8.4 HIGH |
|
Memory corruption in Audio during playback with speaker protection.
|
|||||
| CVE-2023-33030 | 1 Qualcomm | 596 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 593 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory corruption in HLOS while running playready use-case.
|
|||||
| CVE-2023-28540 | 1 Qualcomm | 304 315 5g Iot Modem, 315 5g Iot Modem Firmware, Apq5053-aa and 301 more | 2024-11-21 | N/A | 9.1 CRITICAL |
|
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
|
|||||
| CVE-2023-21664 | 1 Qualcomm | 274 Aqt1000, Aqt1000 Firmware, Ar8035 and 271 more | 2024-11-21 | N/A | 7.8 HIGH |
|
Memory Corruption in Core Platform while printing the response buffer in log.
|
|||||
| CVE-2023-21662 | 1 Qualcomm | 272 Aqt1000, Aqt1000 Firmware, Ar8035 and 269 more | 2024-11-21 | N/A | 7.8 HIGH |
|
Memory corruption in Core Platform while printing the response buffer in log.
|
|||||
| CVE-2023-21651 | 1 Qualcomm | 280 Aqt1000, Aqt1000 Firmware, Ar8031 and 277 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
|
|||||
| CVE-2022-40536 | 1 Qualcomm | 162 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 159 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
|
|||||
| CVE-2022-40523 | 1 Qualcomm | 370 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 367 more | 2024-11-21 | N/A | 7.1 HIGH |
|
Information disclosure in Kernel due to indirect branch misprediction.
|
|||||
| CVE-2022-40521 | 1 Qualcomm | 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8953pro and 481 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to improper authorization in Modem
|
|||||
| CVE-2022-40508 | 1 Qualcomm | 136 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 133 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
|
|||||
| CVE-2022-40507 | 1 Qualcomm | 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 481 more | 2024-11-21 | N/A | 8.4 HIGH |
|
Memory corruption due to double free in Core while mapping HLOS address to the list.
|
|||||
| CVE-2022-40504 | 1 Qualcomm | 378 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8905 and 375 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
|
|||||
| CVE-2022-34144 | 1 Qualcomm | 136 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 133 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
|
|||||
| CVE-2022-33305 | 1 Qualcomm | 162 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 159 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
|
|||||
| CVE-2022-33302 | 1 Qualcomm | 450 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8905 and 447 more | 2024-11-21 | N/A | 6.8 MEDIUM |
|
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
|
|||||
| CVE-2022-33289 | 1 Qualcomm | 452 315 5g Iot Modem, 315 5g Iot Modem Firmware, 7wcn785x-1 and 449 more | 2024-11-21 | N/A | 6.8 MEDIUM |
|
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
|
|||||
| CVE-2022-33288 | 1 Qualcomm | 256 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 253 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
|
|||||
| CVE-2022-33273 | 1 Qualcomm | 198 Aqt1000, Aqt1000 Firmware, Ar8035 and 195 more | 2024-11-21 | N/A | 7.3 HIGH |
|
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
|
|||||
| CVE-2022-33272 | 1 Qualcomm | 98 Ar8035, Ar8035 Firmware, Qca6390 and 95 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS in modem due to reachable assertion.
|
|||||
| CVE-2022-33270 | 1 Qualcomm | 84 Ar8035, Ar8035 Firmware, Qca6391 and 81 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
|
|||||
| CVE-2022-33269 | 1 Qualcomm | 202 Aqt1000, Aqt1000 Firmware, Ar8035 and 199 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.
|
|||||
| CVE-2022-33264 | 1 Qualcomm | 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8953pro and 481 more | 2024-11-21 | N/A | 7.9 HIGH |
|
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
|
|||||
| CVE-2022-33257 | 1 Qualcomm | 280 Aqt1000, Aqt1000 Firmware, Ar8031 and 277 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
|
|||||
| CVE-2022-33256 | 1 Qualcomm | 130 Ar8035, Ar8035 Firmware, Qca6390 and 127 more | 2024-11-21 | N/A | 9.8 CRITICAL |
|
Memory corruption due to improper validation of array index in Multi-mode call processor.
|
|||||
| CVE-2022-33254 | 1 Qualcomm | 128 Aqt1000, Aqt1000 Firmware, Ar8035 and 125 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in Modem while processing SIB1 Message.
|
|||||
| CVE-2022-33251 | 1 Qualcomm | 148 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 145 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
|
|||||
| CVE-2022-33250 | 1 Qualcomm | 130 Ar8035, Ar8035 Firmware, Qca6390 and 127 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.
|
|||||
| CVE-2022-33248 | 1 Qualcomm | 324 Apq8009, Apq8009 Firmware, Apq8009w and 321 more | 2024-11-21 | N/A | 7.8 HIGH |
|
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
|
|||||
| CVE-2022-33244 | 1 Qualcomm | 78 Ar8035, Ar8035 Firmware, Qca6391 and 75 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
|
|||||
| CVE-2022-33233 | 1 Qualcomm | 402 Apq8009, Apq8009 Firmware, Apq8009w and 399 more | 2024-11-21 | N/A | 7.8 HIGH |
|
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
|
|||||
| CVE-2022-33232 | 1 Qualcomm | 222 Aqt1000, Aqt1000 Firmware, Ar8035 and 219 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
|
|||||
| CVE-2022-33231 | 1 Qualcomm | 438 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8098 and 435 more | 2024-11-21 | N/A | 9.3 CRITICAL |
|
Memory corruption due to double free in core while initializing the encryption key.
|
|||||
| CVE-2022-33213 | 1 Qualcomm | 418 Apq8009, Apq8009 Firmware, Apq8009w and 415 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Memory corruption in modem due to buffer overflow while processing a PPP packet
|
|||||
| CVE-2022-25705 | 1 Qualcomm | 402 Apq8009, Apq8009 Firmware, Apq8009w and 399 more | 2024-11-21 | N/A | 7.8 HIGH |
|
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
|
|||||
| CVE-2022-25694 | 1 Qualcomm | 416 Apq8009, Apq8009 Firmware, Apq8009w and 413 more | 2024-11-21 | N/A | 8.4 HIGH |
|
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
|
|||||
| CVE-2022-22076 | 1 Qualcomm | 696 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8953pro and 693 more | 2024-11-21 | N/A | 7.1 HIGH |
|
information disclosure due to cryptographic issue in Core during RPMB read request.
|
|||||
| CVE-2022-22060 | 1 Qualcomm | 148 315 5g Iot Modem, 315 5g Iot Modem Firmware, Ar8035 and 145 more | 2024-11-21 | N/A | 7.5 HIGH |
|
Assertion occurs while processing Reconfiguration message due to improper validation
|
|||||
| CVE-2021-30349 | 1 Qualcomm | 282 Aqt1000, Aqt1000 Firmware, Ar8031 and 279 more | 2024-11-21 | 7.2 HIGH | 8.2 HIGH |
|
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
|
|||||
| CVE-2021-30339 | 1 Qualcomm | 110 Ar8035, Ar8035 Firmware, Qca6391 and 107 more | 2024-11-21 | 4.9 MEDIUM | 9.0 CRITICAL |
|
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
|
|||||
| CVE-2021-30285 | 1 Qualcomm | 204 Ar8031, Ar8031 Firmware, Ar8035 and 201 more | 2024-11-21 | 4.6 MEDIUM | 9.3 CRITICAL |
|
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
|
|||||