Msm8996au Firmware

CVEs (707)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-33033	Qualcomm Audio	Hig	0.55	8.4	0.00	Jan 2, 2024	Memory corruption in Audio during playback with speaker protection.
CVE-2023-33021	Qualcomm Graphics	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption in Graphics while processing user packets for command submission.
CVE-2023-28537	Qualcomm Audio	Hig	0.55	8.4	0.00	Aug 8, 2023	Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22666	Qualcomm Audio	Hig	0.55	8.4	0.00	Aug 8, 2023	Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2023-22667	Qualcomm Audio	Hig	0.55	8.4	0.00	Jul 4, 2023	Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-21632	Qualcomm Automotive GPU	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in Automotive GPU while querying a gsl memory node.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2023-21665	Qualcomm Wcd9380 Firmware	Hig	0.55	8.4	0.00	May 2, 2023	Memory corruption in Graphics while importing a file.
CVE-2022-40532	Qualcomm WLAN	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-33282	Qualcomm Automotive Multimedia	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25694	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25655	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33243	Qualcomm IPC	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40520	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption due to stack-based buffer overflow in Core
CVE-2022-25695	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25743	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Nov 15, 2022	Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25724	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Nov 15, 2022	Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33210	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Oct 19, 2022	Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

CVE-2023-33033HigJan 2, 2024
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio during playback with speaker protection.
CVE-2023-33021HigSep 5, 2023
Qualcomm
Graphics
risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while processing user packets for command submission.
CVE-2023-28537HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22666HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2023-22667HigJul 4, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-21632HigJun 6, 2023
Qualcomm
Automotive GPU
risk 0.55cvss 8.4epss 0.00
Memory corruption in Automotive GPU while querying a gsl memory node.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2023-21665HigMay 2, 2023
Qualcomm
Wcd9380 Firmware
risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while importing a file.
CVE-2022-40532HigApr 13, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-33282HigApr 13, 2023
Qualcomm
Automotive Multimedia
risk 0.55cvss 8.4epss 0.00
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-25694HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25655HigMar 10, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33243HigFeb 12, 2023
Qualcomm
IPC
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40520HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to stack-based buffer overflow in Core
CVE-2022-25695HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25743HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-25724HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33210HigOct 19, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

Page 11 of 36