Sm8250 Ac Firmware
by Qualcomm
CVEs (75)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-24848 | Hig | 0.53 | 8.2 | 0.00 | Oct 3, 2023 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. | ||
| CVE-2023-22385 | Hig | 0.53 | 8.2 | 0.00 | Oct 3, 2023 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. | ||
| CVE-2023-21669 | Hig | 0.53 | 8.2 | 0.00 | Jun 6, 2023 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. | ||
| CVE-2022-40503 | Hig | 0.53 | 8.2 | 0.00 | Apr 13, 2023 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. | ||
| CVE-2024-23368 | Hig | 0.51 | 7.8 | 0.00 | Jul 1, 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition. | ||
| CVE-2024-21465 | Hig | 0.51 | 7.8 | 0.00 | Jul 1, 2024 | Memory corruption while processing key blob passed by the user. | ||
| CVE-2023-33079 | Hig | 0.51 | 7.8 | 0.00 | Dec 5, 2023 | Memory corruption in Audio while running invalid audio recording from ADSP. | ||
| CVE-2023-33018 | Hig | 0.51 | 7.8 | 0.00 | Dec 5, 2023 | Memory corruption while using the UIM diag command to get the operators name. | ||
| CVE-2023-33017 | Hig | 0.51 | 7.8 | 0.00 | Dec 5, 2023 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. | ||
| CVE-2023-33059 | Hig | 0.51 | 7.8 | 0.00 | Nov 7, 2023 | Memory corruption in Audio while processing the VOC packet data from ADSP. | ||
| CVE-2023-33055 | Hig | 0.51 | 7.8 | 0.00 | Nov 7, 2023 | Memory Corruption in Audio while invoking callback function in driver from ADSP. | ||
| CVE-2023-33031 | Hig | 0.51 | 7.8 | 0.00 | Nov 7, 2023 | Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. | ||
| CVE-2023-33035 | Hig | 0.51 | 7.8 | 0.00 | Oct 3, 2023 | Memory corruption while invoking callback function of AFE from ADSP. | ||
| CVE-2023-24850 | Hig | 0.51 | 7.8 | 0.00 | Oct 3, 2023 | Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. | ||
| CVE-2023-21670 | Hig | 0.51 | 7.8 | 0.00 | Jun 6, 2023 | Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. | ||
| CVE-2023-21657 | Hig | 0.51 | 7.8 | 0.00 | Jun 6, 2023 | Memoru corruption in Audio when ADSP sends input during record use case. | ||
| CVE-2023-21656 | Hig | 0.51 | 7.8 | 0.00 | Jun 6, 2023 | Memory corruption in WLAN HOST while receiving an WMI event from firmware. | ||
| CVE-2022-33264 | Hig | 0.51 | 7.9 | 0.00 | Jun 6, 2023 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. | ||
| CVE-2022-25713 | Hig | 0.51 | 7.8 | 0.00 | May 2, 2023 | Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key. | ||
| CVE-2023-33081 | Hig | 0.49 | 7.5 | 0.00 | Dec 5, 2023 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
- risk 0.53cvss 8.2epss 0.00
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
- risk 0.53cvss 8.2epss 0.00
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
- risk 0.53cvss 8.2epss 0.00
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
- risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when allocating and accessing an entry in an SMEM partition.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing key blob passed by the user.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in Audio while running invalid audio recording from ADSP.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while using the UIM diag command to get the operators name.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in Audio while processing the VOC packet data from ADSP.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption in Audio while invoking callback function in driver from ADSP.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while invoking callback function of AFE from ADSP.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
- risk 0.51cvss 7.8epss 0.00
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
- risk 0.51cvss 7.8epss 0.00
Memoru corruption in Audio when ADSP sends input during record use case.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
- risk 0.51cvss 7.9epss 0.00
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
- risk 0.49cvss 7.5epss 0.00
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
Page 2 of 4