Qca6436 Firmware
by Qualcomm
CVEs (675)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-33036 | Med | 0.44 | 6.7 | 0.00 | Dec 2, 2024 | Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access. | ||
| CVE-2021-30299 | Med | 0.44 | 6.7 | 0.00 | Nov 22, 2024 | Possible out of bound access in audio module due to lack of validation of user provided input. | ||
| CVE-2024-33032 | Med | 0.44 | 6.7 | 0.00 | Nov 4, 2024 | Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it. | ||
| CVE-2024-33016 | Med | 0.44 | 6.8 | 0.00 | Sep 2, 2024 | memory corruption when an invalid firehose patch command is invoked. | ||
| CVE-2023-43527 | Med | 0.44 | 6.8 | 0.00 | May 6, 2024 | Information disclosure while parsing dts header atom in Video. | ||
| CVE-2023-43524 | Med | 0.44 | 6.7 | 0.00 | May 6, 2024 | Memory corruption when the bandpass filter order received from AHAL is not within the expected range. | ||
| CVE-2023-43521 | Med | 0.44 | 6.7 | 0.00 | May 6, 2024 | Memory corruption when multiple listeners are being registered with the same file descriptor. | ||
| CVE-2023-33077 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in HLOS while converting from authorization token to HIDL vector. | ||
| CVE-2023-33069 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in Audio while processing the calibration data returned from ACDB loader. | ||
| CVE-2023-33068 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in Audio while processing IIR config data from AFE calibration block. | ||
| CVE-2023-33067 | Med | 0.44 | 6.7 | 0.00 | Feb 6, 2024 | Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points. | ||
| CVE-2023-33038 | Med | 0.44 | 6.7 | 0.00 | Jan 2, 2024 | Memory corruption while receiving a message in Bus Socket Transport Server. | ||
| CVE-2023-33024 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory corruption while sending SMS from AP firmware. | ||
| CVE-2023-22668 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space. | ||
| CVE-2023-22383 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory Corruption in camera while installing a fd for a particular DMA buffer. | ||
| CVE-2023-21634 | Med | 0.44 | 6.7 | 0.00 | Dec 5, 2023 | Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. | ||
| CVE-2023-28570 | Med | 0.44 | 6.7 | 0.00 | Nov 7, 2023 | Memory corruption while processing audio effects. | ||
| CVE-2023-21654 | Med | 0.44 | 6.7 | 0.00 | Sep 5, 2023 | Memory corruption in Audio during playback session with audio effects enabled. | ||
| CVE-2023-21644 | Med | 0.44 | 6.7 | 0.00 | Sep 5, 2023 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. | ||
| CVE-2023-21636 | Med | 0.44 | 6.7 | 0.00 | Sep 5, 2023 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
- risk 0.44cvss 6.7epss 0.00
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
- risk 0.44cvss 6.7epss 0.00
Possible out of bound access in audio module due to lack of validation of user provided input.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
- risk 0.44cvss 6.8epss 0.00
memory corruption when an invalid firehose patch command is invoked.
- risk 0.44cvss 6.8epss 0.00
Information disclosure while parsing dts header atom in Video.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when the bandpass filter order received from AHAL is not within the expected range.
- risk 0.44cvss 6.7epss 0.00
Memory corruption when multiple listeners are being registered with the same file descriptor.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in HLOS while converting from authorization token to HIDL vector.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while processing IIR config data from AFE calibration block.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while receiving a message in Bus Socket Transport Server.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while sending SMS from AP firmware.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in Audio while invoking IOCTLs calls from the user-space.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in camera while installing a fd for a particular DMA buffer.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
- risk 0.44cvss 6.7epss 0.00
Memory corruption while processing audio effects.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio during playback session with audio effects enabled.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption due to improper validation of array index in Linux while updating adn record.
Page 28 of 34