VYPR

Sm8250 Firmware

by Qualcomm

CVEs (252)

  • CVE-2022-25713HigMay 2, 2023
    Qualcomm
    Automotive
    risk 0.51cvss 7.8epss 0.00

    Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

  • CVE-2020-3632HigNov 12, 2020
    Qualcomm
    Snapdragon Compute
    risk 0.51cvss 7.8epss 0.00

    u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P,…

  • CVE-2020-11207HigNov 12, 2020
    Qualcomm
    LibFastCV
    risk 0.51cvss 7.8epss 0.01

    Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655,…

  • CVE-2020-11206HigNov 12, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.02

    Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410,…

  • CVE-2020-11205HigNov 12, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350,…

  • CVE-2020-11175HigNov 12, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2020-11130HigNov 12, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,…

  • CVE-2020-11127HigNov 12, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2020-11121HigNov 12, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155,…

  • CVE-2020-3694HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in Bitra, Nicobar, Saipan, SM6150, SM8150, SM8250, SXR2130

  • CVE-2020-3693HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

  • CVE-2020-3690HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2020-3684HigNov 2, 2020
    Qualcomm
    QSEE
    risk 0.51cvss 7.8epss 0.00

    u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2020-3638HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2020-11174HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2020-11164HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti,…

  • CVE-2020-11162HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

  • CVE-2020-11125HigNov 2, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

  • CVE-2020-3656HigSep 9, 2020
    Qualcomm
    Snapdragon
    risk 0.51cvss 7.8epss 0.00

    Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

  • CVE-2020-11129HigSep 9, 2020
    Qualcomm
    Snapdragon Mobile
    risk 0.51cvss 7.8epss 0.00

    u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-after-free' in Snapdragon Consumer IOT, Snapdragon Mobile in Bitra, Kamorta, QCS605, Saipan, SDM710, SM8250, SXR2130

Page 5 of 13