VYPR

Qcs605 Firmware

by Qualcomm

CVEs (615)

  • CVE-2019-10553CriMar 5, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2019-10552CriMar 5, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2019-10579CriJan 21, 2020
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2018-13906CriJun 14, 2019
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

  • CVE-2018-11932CriFeb 25, 2019
    Qualcomm
    Snapdragon
    risk 0.59cvss 9.1epss 0.01

    Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650,…

  • CVE-2020-11269HigFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2020-11177HigFeb 22, 2021
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

  • CVE-2019-2316HigJul 25, 2019
    Qualcomm
    Snapdragon
    risk 0.57cvss 8.8epss 0.00

    When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD…

  • CVE-2019-10529HigNov 6, 2019
    Qualcomm
    Snapdragon
    risk 0.56cvss 8.1epss 0.02

    Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2023-33022HigDec 5, 2023
    Qualcomm
    HLOS
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in HLOS while invoking IOCTL calls from user-space.

  • CVE-2023-28537HigAug 8, 2023
    Qualcomm
    Audio
    risk 0.55cvss 8.4epss 0.00

    Memory corruption while allocating memory in COmxApeDec module in Audio.

  • CVE-2023-22666HigAug 8, 2023
    Qualcomm
    Audio
    risk 0.55cvss 8.4epss 0.00

    Memory Corruption in Audio while playing amrwbplus clips with modified content.

  • CVE-2023-21666HigMay 2, 2023
    Qualcomm
    Wcd9380 Firmware
    risk 0.55cvss 8.4epss 0.00

    Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

  • CVE-2022-40531HigMar 10, 2023
    Qualcomm
    WLAN
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

  • CVE-2022-25694HigMar 10, 2023
    Qualcomm
    Modem
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

  • CVE-2022-25655HigMar 10, 2023
    Qualcomm
    WLAN HAL
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.

  • CVE-2022-33277HigFeb 12, 2023
    Qualcomm
    Modem
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

  • CVE-2022-33243HigFeb 12, 2023
    Qualcomm
    IPC
    risk 0.55cvss 8.4epss 0.00

    Memory corruption due to improper access control in Qualcomm IPC.

  • CVE-2022-40520HigJan 9, 2023
    Qualcomm
    Core
    risk 0.55cvss 8.4epss 0.01

    Memory corruption due to stack-based buffer overflow in Core

  • CVE-2022-40517HigJan 9, 2023
    Qualcomm
    Core
    risk 0.55cvss 8.4epss 0.00

    Memory corruption in core due to stack-based buffer overflow

Page 9 of 31