Qcs610 Firmware

CVEs (385)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-33031	Qualcomm Automotive Audio	Hig	0.51	7.8	Nov 7, 2023	Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
CVE-2023-33035	Qualcomm ADSP	Hig	0.51	7.8	Oct 3, 2023	Memory corruption while invoking callback function of AFE from ADSP.
CVE-2023-33034	Qualcomm ADSP	Hig	0.51	7.8	Oct 3, 2023	Memory corruption while parsing the ADSP response command.
CVE-2023-28565	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28560	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559	Qualcomm WLAN FW	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558	Qualcomm WLAN handler	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28544	Qualcomm WLAN	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVE-2023-28542	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while fetching TX status information.
CVE-2023-28541	Qualcomm Data Modem	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-24854	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-24851	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
CVE-2023-22386	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
CVE-2023-21656	Qualcomm WLAN Host	Hig	0.51	7.8	Jun 6, 2023	Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVE-2021-35106	Qualcomm Snapdragon	Hig	0.51	7.8	Apr 1, 2022	Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30333	Qualcomm Snapdragon	Hig	0.51	7.8	Apr 1, 2022	Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1950	Qualcomm Snapdragon	Hig	0.51	7.8	Apr 1, 2022	Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2021-30323	Qualcomm Snapdragon	Hig	0.51	7.8	Feb 11, 2022	Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30322	Qualcomm Snapdragon	Hig	0.51	7.8	Feb 11, 2022	Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CVE-2023-33031HigNov 7, 2023
Qualcomm
Automotive Audio
risk 0.51cvss 7.8epss 0.00
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
CVE-2023-33035HigOct 3, 2023
Qualcomm
ADSP
risk 0.51cvss 7.8epss 0.00
Memory corruption while invoking callback function of AFE from ADSP.
CVE-2023-33034HigOct 3, 2023
Qualcomm
ADSP
risk 0.51cvss 7.8epss 0.00
Memory corruption while parsing the ADSP response command.
CVE-2023-28565HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28560HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559HigSep 5, 2023
Qualcomm
WLAN FW
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558HigSep 5, 2023
Qualcomm
WLAN handler
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28544HigSep 5, 2023
Qualcomm
WLAN
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVE-2023-28542HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while fetching TX status information.
CVE-2023-28541HigJul 4, 2023
Qualcomm
Data Modem
risk 0.51cvss 7.8epss 0.00
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-24854HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-24851HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
CVE-2023-22386HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
CVE-2023-21656HigJun 6, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVE-2021-35106HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30333HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1950HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2021-30323HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30322HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Page 9 of 20