Qca6390 Firmware

CVEs (518)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2022-33302	Qualcomm User Identity Module	Med	0.44	6.8	Apr 13, 2023	Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33298	Qualcomm Modem	Med	0.44	6.7	Apr 13, 2023	Memory corruption due to use after free in Modem while modem initialization.
CVE-2022-33289	Qualcomm Modem	Med	0.44	6.8	Apr 13, 2023	Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33246	Qualcomm Audio	Med	0.44	6.7	Feb 12, 2023	Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
CVE-2022-33225	Qualcomm Trusted Application Environment	Med	0.44	6.7	Feb 12, 2023	Memory corruption due to use after free in trusted application environment.
CVE-2022-40519	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-40518	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-25712	Qualcomm Snapdragon	Med	0.44	6.7	Dec 13, 2022	Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25711	Qualcomm Snapdragon	Med	0.44	6.7	Dec 13, 2022	Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25677	Qualcomm Snapdragon	Med	0.44	6.7	Dec 13, 2022	Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25676	Qualcomm Snapdragon	Med	0.44	6.8	Nov 15, 2022	Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666	Qualcomm Snapdragon	Med	0.44	6.7	Oct 19, 2022	Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665	Qualcomm Snapdragon	Med	0.44	6.8	Oct 19, 2022	Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2022-25653	Qualcomm Snapdragon	Med	0.44	6.8	Sep 16, 2022	Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35121	Qualcomm Snapdragon Compute	Med	0.44	6.7	Jun 14, 2022	An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35120	Qualcomm Snapdragon Compute	Med	0.44	6.7	Jun 14, 2022	Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35118	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35098	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35092	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30325	Qualcomm Snapdragon	Med	0.44	6.7	Feb 11, 2022	Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

CVE-2022-33302MedApr 13, 2023
Qualcomm
User Identity Module
risk 0.44cvss 6.8epss 0.00
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33298MedApr 13, 2023
Qualcomm
Modem
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in Modem while modem initialization.
CVE-2022-33289MedApr 13, 2023
Qualcomm
Modem
risk 0.44cvss 6.8epss 0.00
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33246MedFeb 12, 2023
Qualcomm
Audio
risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
CVE-2022-33225MedFeb 12, 2023
Qualcomm
Trusted Application Environment
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in trusted application environment.
CVE-2022-40519MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-40518MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-25712MedDec 13, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25711MedDec 13, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25677MedDec 13, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25676MedNov 15, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2022-25653MedSep 16, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35121MedJun 14, 2022
Qualcomm
Snapdragon Compute
risk 0.44cvss 6.7epss 0.00
An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35120MedJun 14, 2022
Qualcomm
Snapdragon Compute
risk 0.44cvss 6.7epss 0.00
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35118MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35098MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35092MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30325MedFeb 11, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

Page 23 of 26