Wcn7851 Firmware

CVEs (184)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-40537	Qualcomm Bluetooth HOST	Hig	0.47	7.3	0.00	Mar 10, 2023	Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVE-2022-40515	Qualcomm video	Hig	0.47	7.3	0.00	Mar 10, 2023	Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVE-2022-25687	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Oct 19, 2022	memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25688	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 16, 2022	Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25686	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 16, 2022	Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25668	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 2, 2022	Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25659	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 2, 2022	Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25658	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 2, 2022	Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2022-25657	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 2, 2022	Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35097	Qualcomm Snapdragon	Hig	0.47	7.3	0.00	Sep 2, 2022	Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-22087	Qualcomm Snapdragon	Hig	0.47	7.3	0.01	Jun 14, 2022	memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22086	Qualcomm Snapdragon	Hig	0.47	7.3	0.01	Jun 14, 2022	Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2023-21663	Qualcomm Display	Med	0.44	6.7	0.00	Sep 5, 2023	Memory Corruption while accessing metadata in Display.
CVE-2023-21655	Qualcomm Audio	Med	0.44	6.7	0.00	Sep 5, 2023	Memory corruption in Audio while validating and mapping metadata.
CVE-2023-21627	Qualcomm Trusted Execution Environment	Med	0.44	6.7	0.00	Aug 8, 2023	Memory corruption in Trusted Execution Environment while calling service API with invalid address.
CVE-2022-33221	Qualcomm Trusted Execution Environment	Med	0.44	6.8	0.00	Feb 12, 2023	Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVE-2022-40519	Qualcomm Core	Med	0.44	6.8	0.00	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-25711	Qualcomm Snapdragon	Med	0.44	6.7	0.00	Dec 13, 2022	Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25676	Qualcomm Snapdragon	Med	0.44	6.8	0.00	Nov 15, 2022	Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666	Qualcomm Snapdragon	Med	0.44	6.7	0.00	Oct 19, 2022	Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CVE-2022-40537HigMar 10, 2023
Qualcomm
Bluetooth HOST
risk 0.47cvss 7.3epss 0.00
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVE-2022-40515HigMar 10, 2023
Qualcomm
video
risk 0.47cvss 7.3epss 0.00
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVE-2022-25687HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25688HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25686HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25668HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25659HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25658HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2022-25657HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35097HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.00
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-22087HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.01
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-22086HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.47cvss 7.3epss 0.01
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2023-21663MedSep 5, 2023
Qualcomm
Display
risk 0.44cvss 6.7epss 0.00
Memory Corruption while accessing metadata in Display.
CVE-2023-21655MedSep 5, 2023
Qualcomm
Audio
risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while validating and mapping metadata.
CVE-2023-21627MedAug 8, 2023
Qualcomm
Trusted Execution Environment
risk 0.44cvss 6.7epss 0.00
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
CVE-2022-33221MedFeb 12, 2023
Qualcomm
Trusted Execution Environment
risk 0.44cvss 6.8epss 0.00
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVE-2022-40519MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-25711MedDec 13, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25676MedNov 15, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Page 8 of 10