Qca6390 Firmware

CVEs (518)

• CVE-2020-3668CriSep 8, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

• CVE-2020-3667CriSep 8, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2019-14111CriApr 16, 2020
  Qualcomm

  Snapdragon Compute
  risk 0.64cvss 9.8epss 0.01

  Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018,…

• CVE-2019-14095CriMar 5, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

• CVE-2019-14083CriMar 5, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underflow in Snapdragon Auto, Snapdragon Compute, Snapdragon…

• CVE-2023-33063HigKEVDec 5, 2023
  Qualcomm

  DSP Service
  risk 0.63cvss 7.8epss 0.01

  Memory corruption in DSP Services during a remote call from HLOS to DSP.

• CVE-2020-11261HigKEVJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.63cvss 7.8epss 0.02

  Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-30317CriFeb 11, 2022
  Qualcomm

  Snapdragon
  risk 0.61cvss 9.3epss 0.01

  Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2023-21651CriAug 8, 2023
  Qualcomm

  TEE
  risk 0.60cvss 9.3epss 0.00

  Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

• CVE-2022-33288CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

• CVE-2022-33269CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

• CVE-2022-33231CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to double free in core while initializing the encryption key.

• CVE-2022-33257CriMar 10, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

• CVE-2022-33232CriFeb 12, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

• CVE-2021-35122CriSep 2, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• CVE-2021-35090CriJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• CVE-2021-1942CriApr 1, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2021-30285CriJan 13, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

• CVE-2021-30276CriJan 3, 2022
  Qualcomm

  Snapdragon Compute
  risk 0.60cvss 9.3epss 0.00

  Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking

• CVE-2021-30275CriJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…