Sm8450 Firmware

CVEs (43)

• CVE-2023-33045CriNov 7, 2023
  Qualcomm

  WLAN Firmware
  risk 0.64cvss 9.8epss 0.00

  Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

• CVE-2021-30351CriJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.04

  An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2023-33054CriDec 5, 2023
  Qualcomm

  GNSS assistance data
  risk 0.59cvss 9.1epss 0.00

  Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

• CVE-2023-28540CriOct 3, 2023
  Qualcomm

  Data Modem
  risk 0.59cvss 9.1epss 0.00

  Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

• CVE-2023-33022HigDec 5, 2023
  Qualcomm

  HLOS
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in HLOS while invoking IOCTL calls from user-space.

• CVE-2021-30337HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30336HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.55cvss 8.4epss 0.00

  Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

• CVE-2023-33087HigDec 5, 2023
  Qualcomm

  Core
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Core while processing RX intent request.

• CVE-2023-33018HigDec 5, 2023
  Qualcomm

  UIM
  risk 0.51cvss 7.8epss 0.00

  Memory corruption while using the UIM diag command to get the operators name.

• CVE-2023-33017HigDec 5, 2023
  Qualcomm

  UEFI Menu
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

• CVE-2023-21656HigJun 6, 2023
  Qualcomm

  WLAN Host
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HOST while receiving an WMI event from firmware.

• CVE-2022-25713HigMay 2, 2023
  Qualcomm

  Automotive
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

• CVE-2021-30303HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2021-30268HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2021-30267HigJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• CVE-2021-30259HigNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…

• CVE-2021-30255HigNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2021-1979HigNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• CVE-2023-33043HigDec 5, 2023
  Qualcomm

  Modem
  risk 0.49cvss 7.5epss 0.01

  Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

• CVE-2023-33042HigDec 5, 2023
  Qualcomm

  Modem
  risk 0.49cvss 7.5epss 0.01

  Transient DOS in Modem after RRC Setup message is received.