Qcs410 Firmware

CVEs (329)

• CVE-2023-28570MedNov 7, 2023
  Qualcomm

  Audio Effects
  risk 0.44cvss 6.7epss 0.00

  Memory corruption while processing audio effects.

• CVE-2023-28577MedAug 8, 2023
  Qualcomm

  CAM_REQ_MGR_RELEASE_BUF
  risk 0.44cvss 6.7epss 0.00

  In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel…

• CVE-2023-28575MedAug 8, 2023
  Qualcomm

  cam_get_device_priv
  risk 0.44cvss 6.7epss 0.00

  The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

• CVE-2023-21650MedAug 8, 2023
  Qualcomm

  GPS HLOS Driver
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

• CVE-2023-21629MedJul 4, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.8epss 0.00

  Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

• CVE-2022-33227MedJun 6, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Linux android due to double free while calling unregister provider after register call.

• CVE-2022-33302MedApr 13, 2023
  Qualcomm

  User Identity Module
  risk 0.44cvss 6.8epss 0.00

  Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

• CVE-2022-25712MedDec 13, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

• CVE-2021-35092MedJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-30266MedNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30265MedNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2021-30264MedNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…

• CVE-2021-1966MedOct 20, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• CVE-2021-1963MedSep 9, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2021-1961MedSep 9, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2021-1931MedJul 13, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• CVE-2020-11160MedJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2021-1895MedMay 7, 2021
  Qualcomm

  Snapdragon Consumer IOT
  risk 0.44cvss 6.8epss 0.00

  Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

• CVE-2020-11308MedMar 17, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.8epss 0.00

  Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• CVE-2024-53013MedJun 3, 2025
  Qualcomm

  Fastconnect 6900 Firmware
  risk 0.43cvss 6.6epss 0.00

  Memory corruption may occur while processing voice call registration with user.