Sd 8cx Gen2 Firmware

CVEs (83)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-22062	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Sep 2, 2022	An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2021-35083	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Jun 14, 2022	Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-30349	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Jun 14, 2022	Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2023-21664	Qualcomm Core Platform	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21662	Qualcomm Core Platform	Hig	0.51	7.8	0.00	Sep 5, 2023	Memory corruption in Core Platform while printing the response buffer in log.
CVE-2022-33242	Qualcomm audio PD	Hig	0.51	7.8	0.00	Mar 10, 2023	Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
CVE-2022-25705	Qualcomm Modem	Hig	0.51	7.8	0.00	Mar 10, 2023	Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-33248	Qualcomm User Identity Module	Hig	0.51	7.8	0.00	Feb 12, 2023	Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
CVE-2022-33233	Qualcomm Modem	Hig	0.51	7.8	0.00	Feb 12, 2023	Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-25660	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Oct 19, 2022	Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22094	Qualcomm Snapdragon Compute	Hig	0.51	7.8	0.00	Sep 16, 2022	memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22093	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Sep 16, 2022	Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22070	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Sep 2, 2022	Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30333	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Apr 1, 2022	Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30323	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Feb 11, 2022	Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30322	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Feb 11, 2022	Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30308	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Jan 13, 2022	Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-33213	Qualcomm Modem	Hig	0.49	7.5	0.00	Mar 10, 2023	Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-40512	Qualcomm WLAN Firmware	Hig	0.49	7.5	0.00	Feb 12, 2023	Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33286	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

CVE-2022-22062HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2021-35083HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2021-30349HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2023-21664HigSep 5, 2023
Qualcomm
Core Platform
risk 0.51cvss 7.8epss 0.00
Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21662HigSep 5, 2023
Qualcomm
Core Platform
risk 0.51cvss 7.8epss 0.00
Memory corruption in Core Platform while printing the response buffer in log.
CVE-2022-33242HigMar 10, 2023
Qualcomm
audio PD
risk 0.51cvss 7.8epss 0.00
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
CVE-2022-25705HigMar 10, 2023
Qualcomm
Modem
risk 0.51cvss 7.8epss 0.00
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-33248HigFeb 12, 2023
Qualcomm
User Identity Module
risk 0.51cvss 7.8epss 0.00
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
CVE-2022-33233HigFeb 12, 2023
Qualcomm
Modem
risk 0.51cvss 7.8epss 0.00
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-25660HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22094HigSep 16, 2022
Qualcomm
Snapdragon Compute
risk 0.51cvss 7.8epss 0.00
memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22093HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22070HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30333HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30323HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30322HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30308HigJan 13, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-33213HigMar 10, 2023
Qualcomm
Modem
risk 0.49cvss 7.5epss 0.00
Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-40512HigFeb 12, 2023
Qualcomm
WLAN Firmware
risk 0.49cvss 7.5epss 0.00
Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
CVE-2022-33286HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Page 3 of 5