VYPR

Qrb5165 Firmware

by Qualcomm

CVEs (186)

  • CVE-2022-22071HigKEVJun 14, 2022
    risk 0.67cvss 8.4epss 0.00

    Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2020-3657CriNov 2, 2020
    risk 0.66cvss 9.8epss 0.28

    u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2022-40510CriAug 8, 2023
    risk 0.64cvss 9.8epss 0.00

    Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

  • CVE-2022-40514CriFeb 12, 2023
    risk 0.64cvss 9.8epss 0.00

    Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

  • CVE-2022-33279CriFeb 12, 2023
    risk 0.64cvss 9.8epss 0.00

    Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.

  • CVE-2022-22088CriJan 9, 2023
    risk 0.64cvss 9.8epss 0.01

    Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

  • CVE-2022-25748CriOct 19, 2022
    risk 0.64cvss 9.8epss 0.00

    Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

  • CVE-2022-25720CriOct 19, 2022
    risk 0.64cvss 9.8epss 0.00

    Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2021-35104CriJun 14, 2022
    risk 0.64cvss 9.8epss 0.01

    Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

  • CVE-2021-35081CriJun 14, 2022
    risk 0.64cvss 9.8epss 0.01

    Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon…

  • CVE-2021-30351CriJan 3, 2022
    risk 0.64cvss 9.8epss 0.04

    An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2021-1976CriSep 17, 2021
    risk 0.64cvss 9.8epss 0.01

    A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

  • CVE-2021-1972CriSep 8, 2021
    risk 0.64cvss 9.8epss 0.01

    Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

  • CVE-2023-33063HigKEVDec 5, 2023
    risk 0.63cvss 7.8epss 0.01

    Memory corruption in DSP Services during a remote call from HLOS to DSP.

  • CVE-2023-21651CriAug 8, 2023
    risk 0.60cvss 9.3epss 0.00

    Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

  • CVE-2022-33288CriApr 13, 2023
    risk 0.60cvss 9.3epss 0.00

    Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

  • CVE-2022-33231CriApr 13, 2023
    risk 0.60cvss 9.3epss 0.00

    Memory corruption due to double free in core while initializing the encryption key.

  • CVE-2022-33257CriMar 10, 2023
    risk 0.60cvss 9.3epss 0.00

    Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

  • CVE-2022-33232CriFeb 12, 2023
    risk 0.60cvss 9.3epss 0.00

    Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

  • CVE-2021-35122CriSep 2, 2022
    risk 0.60cvss 9.3epss 0.00

    Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Page 1 of 10