Ipq8064 Firmware

CVEs (187)

• CVE-2021-1924CriNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.0epss 0.00

  Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

• CVE-2020-11159CriJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…

• CVE-2020-11126CriJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2020-11276CriFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

• CVE-2020-11275CriFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

• CVE-2019-10622CriApr 16, 2020
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2019-14063CriFeb 7, 2020
  Qualcomm

  IPQ4019
  risk 0.59cvss 9.1epss 0.01

  Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and…

• CVE-2020-11269HigFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.57cvss 8.8epss 0.00

  Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

• CVE-2024-33056HigDec 2, 2024
  Qualcomm

  SMEM partition
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

• CVE-2023-33088HigDec 5, 2023
  Qualcomm

  vdev
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when processing cmd parameters while parsing vdev.

• CVE-2022-33275HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

• CVE-2023-21628HigJun 6, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

• CVE-2022-40532HigApr 13, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

• CVE-2022-40531HigMar 10, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

• CVE-2022-25655HigMar 10, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.

• CVE-2022-33277HigFeb 12, 2023
  Qualcomm

  Modem
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

• CVE-2022-33243HigFeb 12, 2023
  Qualcomm

  IPC
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to improper access control in Qualcomm IPC.

• CVE-2022-33276HigJan 9, 2023
  Qualcomm

  Modem
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

• CVE-2021-30337HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30335HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…