Qca6436 Firmware

CVEs (412)

• CVE-2023-33077MedFeb 6, 2024
  Qualcomm

  HLOS
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in HLOS while converting from authorization token to HIDL vector.

• CVE-2023-33069MedFeb 6, 2024
  Qualcomm

  Audio
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Audio while processing the calibration data returned from ACDB loader.

• CVE-2023-33068MedFeb 6, 2024
  Qualcomm

  Audio
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Audio while processing IIR config data from AFE calibration block.

• CVE-2023-33067MedFeb 6, 2024
  Qualcomm

  Audio
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

• CVE-2023-33038MedJan 2, 2024
  Qualcomm

  Bus Socket Transport Server
  risk 0.44cvss 6.7epss 0.00

  Memory corruption while receiving a message in Bus Socket Transport Server.

• CVE-2023-22383MedDec 5, 2023
  Qualcomm

  camera
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in camera while installing a fd for a particular DMA buffer.

• CVE-2023-21634MedDec 5, 2023
  Qualcomm

  Radio Interface Layer
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

• CVE-2023-28570MedNov 7, 2023
  Qualcomm

  Audio Effects
  risk 0.44cvss 6.7epss 0.00

  Memory corruption while processing audio effects.

• CVE-2023-21644MedSep 5, 2023
  Qualcomm

  RIL
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.

• CVE-2022-40524MedSep 5, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.7epss 0.00

  Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

• CVE-2023-28577MedAug 8, 2023
  Qualcomm

  CAM_REQ_MGR_RELEASE_BUF
  risk 0.44cvss 6.7epss 0.00

  In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel…

• CVE-2023-28575MedAug 8, 2023
  Qualcomm

  cam_get_device_priv
  risk 0.44cvss 6.7epss 0.00

  The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

• CVE-2023-21650MedAug 8, 2023
  Qualcomm

  GPS HLOS Driver
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

• CVE-2023-21627MedAug 8, 2023
  Qualcomm

  Trusted Execution Environment
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Trusted Execution Environment while calling service API with invalid address.

• CVE-2023-21637MedJul 4, 2023
  Qualcomm

  Linux
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Linux while calling system configuration APIs.

• CVE-2023-21635MedJul 4, 2023
  Qualcomm

  Data Network Stack & Connectivity
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

• CVE-2023-21629MedJul 4, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.8epss 0.00

  Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

• CVE-2022-33227MedJun 6, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Linux android due to double free while calling unregister provider after register call.

• CVE-2022-33302MedApr 13, 2023
  Qualcomm

  User Identity Module
  risk 0.44cvss 6.8epss 0.00

  Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

• CVE-2022-25712MedDec 13, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables