Sm8250 Firmware

CVEs (185)

• CVE-2019-10622CriApr 16, 2020
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2019-14063CriFeb 7, 2020
  Qualcomm

  IPQ4019
  risk 0.59cvss 9.1epss 0.01

  Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and…

• CVE-2019-10579CriJan 21, 2020
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

• CVE-2023-33022HigDec 5, 2023
  Qualcomm

  HLOS
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in HLOS while invoking IOCTL calls from user-space.

• CVE-2023-21669HigJun 6, 2023
  Qualcomm

  WLAN Host
  risk 0.53cvss 8.2epss 0.00

  Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

• CVE-2020-11156HigNov 2, 2020
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.1epss 0.00

  u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

• CVE-2020-11141HigNov 2, 2020
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.1epss 0.00

  u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap configuration request received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

• CVE-2023-33079HigDec 5, 2023
  Qualcomm

  ADSP
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Audio while running invalid audio recording from ADSP.

• CVE-2023-33018HigDec 5, 2023
  Qualcomm

  UIM
  risk 0.51cvss 7.8epss 0.00

  Memory corruption while using the UIM diag command to get the operators name.

• CVE-2023-33017HigDec 5, 2023
  Qualcomm

  UEFI Menu
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

• CVE-2023-33055HigNov 7, 2023
  Qualcomm

  ADSP
  risk 0.51cvss 7.8epss 0.00

  Memory Corruption in Audio while invoking callback function in driver from ADSP.

• CVE-2023-33031HigNov 7, 2023
  Qualcomm

  Automotive Audio
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

• CVE-2023-21656HigJun 6, 2023
  Qualcomm

  WLAN Host
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HOST while receiving an WMI event from firmware.

• CVE-2022-25713HigMay 2, 2023
  Qualcomm

  Automotive
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

• CVE-2020-3632HigNov 12, 2020
  Qualcomm

  Snapdragon Compute
  risk 0.51cvss 7.8epss 0.00

  u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P,…

• CVE-2020-11207HigNov 12, 2020
  Qualcomm

  LibFastCV
  risk 0.51cvss 7.8epss 0.01

  Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655,…

• CVE-2020-11206HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.02

  Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410,…

• CVE-2020-11205HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350,…

• CVE-2020-11175HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

• CVE-2020-11130HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,…