Wcn3998 Firmware

CVEs (458)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2021-35080	Qualcomm Snapdragon Mobile	Med	0.42	6.5	Jun 14, 2022	Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-30345	Qualcomm Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking	Med	0.42	6.5	Jun 14, 2022	RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2021-30348	Qualcomm Snapdragon	Med	0.42	6.5	Jan 3, 2022	Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2021-1918	Qualcomm Snapdragon	Med	0.42	6.5	Jan 3, 2022	Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1960	Qualcomm Snapdragon	Med	0.42	6.5	Sep 9, 2021	Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2021-1957	Qualcomm Snapdragon Compute	Med	0.42	6.5	Sep 9, 2021	Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-1956	Qualcomm Snapdragon	Med	0.42	6.5	Sep 9, 2021	Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2020-11230	Qualcomm Snapdragon	Med	0.42	6.4	Mar 17, 2021	Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2020-11220	Qualcomm Snapdragon	Med	0.42	6.4	Mar 17, 2021	While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,…
CVE-2022-40533	Qualcomm Sxr2230p Firmware	Med	0.40	6.2	Jun 6, 2023	Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
CVE-2022-22075	Qualcomm Graphics	Med	0.40	6.2	Mar 10, 2023	Information Disclosure in Graphics during GPU context switch.
CVE-2022-25725	Qualcomm Modem	Med	0.40	6.2	Jan 9, 2023	Denial of service in MODEM due to improper pointer handling
CVE-2022-25679	Qualcomm Snapdragon Compute	Med	0.40	6.2	Nov 15, 2022	Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25664	Qualcomm Snapdragon	Med	0.40	6.2	Oct 19, 2022	Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35135	Qualcomm Snapdragon	Med	0.40	6.2	Sep 2, 2022	A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35079	Qualcomm Snapdragon Compute	Med	0.40	6.2	Jun 14, 2022	Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30314	Qualcomm Snapdragon Compute	Med	0.40	6.2	Jan 13, 2022	Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-1969	Qualcomm Snapdragon	Med	0.40	6.2	Oct 20, 2021	Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…
CVE-2021-1968	Qualcomm Snapdragon	Med	0.40	6.2	Oct 20, 2021	Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…
CVE-2021-1929	Qualcomm Snapdragon	Med	0.40	6.2	Sep 8, 2021	Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVE-2021-35080MedJun 14, 2022
Qualcomm
Snapdragon Mobile
risk 0.42cvss 6.5epss 0.00
Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-30345MedJun 14, 2022
Qualcomm
Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
risk 0.42cvss 6.5epss 0.00
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2021-30348MedJan 3, 2022
Qualcomm
Snapdragon
risk 0.42cvss 6.5epss 0.00
Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2021-1918MedJan 3, 2022
Qualcomm
Snapdragon
risk 0.42cvss 6.5epss 0.00
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1960MedSep 9, 2021
Qualcomm
Snapdragon
risk 0.42cvss 6.5epss 0.00
Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2021-1957MedSep 9, 2021
Qualcomm
Snapdragon Compute
risk 0.42cvss 6.5epss 0.00
Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-1956MedSep 9, 2021
Qualcomm
Snapdragon
risk 0.42cvss 6.5epss 0.00
Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2020-11230MedMar 17, 2021
Qualcomm
Snapdragon
risk 0.42cvss 6.4epss 0.00
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2020-11220MedMar 17, 2021
Qualcomm
Snapdragon
risk 0.42cvss 6.4epss 0.00
While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT,…
CVE-2022-40533MedJun 6, 2023
Qualcomm
Sxr2230p Firmware
risk 0.40cvss 6.2epss 0.00
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
CVE-2022-22075MedMar 10, 2023
Qualcomm
Graphics
risk 0.40cvss 6.2epss 0.00
Information Disclosure in Graphics during GPU context switch.
CVE-2022-25725MedJan 9, 2023
Qualcomm
Modem
risk 0.40cvss 6.2epss 0.00
Denial of service in MODEM due to improper pointer handling
CVE-2022-25679MedNov 15, 2022
Qualcomm
Snapdragon Compute
risk 0.40cvss 6.2epss 0.00
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25664MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.40cvss 6.2epss 0.00
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35135MedSep 2, 2022
Qualcomm
Snapdragon
risk 0.40cvss 6.2epss 0.00
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35079MedJun 14, 2022
Qualcomm
Snapdragon Compute
risk 0.40cvss 6.2epss 0.00
Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30314MedJan 13, 2022
Qualcomm
Snapdragon Compute
risk 0.40cvss 6.2epss 0.00
Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-1969MedOct 20, 2021
Qualcomm
Snapdragon
risk 0.40cvss 6.2epss 0.00
Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…
CVE-2021-1968MedOct 20, 2021
Qualcomm
Snapdragon
risk 0.40cvss 6.2epss 0.00
Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…
CVE-2021-1929MedSep 8, 2021
Qualcomm
Snapdragon
risk 0.40cvss 6.2epss 0.00
Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Page 22 of 23