Sd835 Firmware

CVEs (181)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-33017	Qualcomm UEFI Menu	Hig	0.51	7.8	Dec 5, 2023	Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-28550	Qualcomm MPP	Hig	0.51	7.8	Dec 5, 2023	Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546	Qualcomm SPS Application	Hig	0.51	7.8	Dec 5, 2023	Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28565	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28560	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559	Qualcomm WLAN FW	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558	Qualcomm WLAN handler	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28549	Qualcomm WLAN HAL	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-28544	Qualcomm WLAN	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVE-2023-28542	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while fetching TX status information.
CVE-2023-28541	Qualcomm Data Modem	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-24854	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-24851	Qualcomm WLAN Host	Hig	0.51	7.8	Jul 4, 2023	Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
CVE-2023-21656	Qualcomm WLAN Host	Hig	0.51	7.8	Jun 6, 2023	Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVE-2021-30259	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-30255	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1979	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1959	Qualcomm Snapdragon	Hig	0.51	7.8	Oct 20, 2021	Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-11304	Qualcomm Snapdragon	Hig	0.51	7.8	Jun 9, 2021	Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2023-33017HigDec 5, 2023
Qualcomm
UEFI Menu
risk 0.51cvss 7.8epss 0.00
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-28550HigDec 5, 2023
Qualcomm
MPP
risk 0.51cvss 7.8epss 0.00
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546HigDec 5, 2023
Qualcomm
SPS Application
risk 0.51cvss 7.8epss 0.00
Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28565HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28560HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
CVE-2023-28559HigSep 5, 2023
Qualcomm
WLAN FW
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
CVE-2023-28558HigSep 5, 2023
Qualcomm
WLAN handler
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
CVE-2023-28557HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
CVE-2023-28549HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
CVE-2023-28544HigSep 5, 2023
Qualcomm
WLAN
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVE-2023-28542HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while fetching TX status information.
CVE-2023-28541HigJul 4, 2023
Qualcomm
Data Modem
risk 0.51cvss 7.8epss 0.00
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
CVE-2023-24854HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.
CVE-2023-24851HigJul 4, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory Corruption in WLAN HOST while parsing QMI response message from firmware.
CVE-2023-21656HigJun 6, 2023
Qualcomm
WLAN Host
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVE-2021-30259HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-30255HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1979HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1959HigOct 20, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-11304HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Page 5 of 10