Sd870 Firmware

CVEs (379)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-30343	Qualcomm Snapdragon	Cri	0.59	9.1	0.00	Jun 14, 2022	Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1924	Qualcomm Snapdragon	Cri	0.59	9.0	0.00	Nov 12, 2021	Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2020-11222	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Mar 17, 2021	Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
CVE-2020-11190	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Mar 17, 2021	Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11189	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Mar 17, 2021	Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11188	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Mar 17, 2021	Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11171	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Mar 17, 2021	Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11166	Qualcomm Snapdragon	Cri	0.59	9.1	0.01	Mar 17, 2021	Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…
CVE-2021-35123	Qualcomm Snapdragon Connectivity	Hig	0.57	8.8	0.00	Jun 14, 2022	Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT
CVE-2023-28538	Qualcomm WIN Product	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2023-28537	Qualcomm Audio	Hig	0.55	8.4	0.00	Aug 8, 2023	Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22666	Qualcomm Audio	Hig	0.55	8.4	0.00	Aug 8, 2023	Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25709	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-33277	Qualcomm Modem	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33243	Qualcomm IPC	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40520	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40517	Qualcomm Core	Hig	0.55	8.4	0.00	Jan 9, 2023	Memory corruption in core due to stack-based buffer overflow

CVE-2021-30343CriJun 14, 2022
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.00
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1924CriNov 12, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.0epss 0.00
Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2020-11222CriMar 17, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile
CVE-2020-11190CriMar 17, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11189CriMar 17, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11188CriMar 17, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11171CriMar 17, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11166CriMar 17, 2021
Qualcomm
Snapdragon
risk 0.59cvss 9.1epss 0.01
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,…
CVE-2021-35123HigJun 14, 2022
Qualcomm
Snapdragon Connectivity
risk 0.57cvss 8.8epss 0.00
Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT
CVE-2023-28538HigSep 5, 2023
Qualcomm
WIN Product
risk 0.55cvss 8.4epss 0.00
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2023-28537HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22666HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25709HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-33277HigFeb 12, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33243HigFeb 12, 2023
Qualcomm
IPC
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40520HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40517HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory corruption in core due to stack-based buffer overflow

Page 3 of 19