Sc8180x\+sdx55 Firmware

CVEs (184)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-28547	Qualcomm SPS Application	Hig	0.55	8.4	0.00	Apr 1, 2024	Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-43541	Qualcomm Gfx engine	Hig	0.55	8.4	0.00	Mar 4, 2024	Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.
CVE-2023-33066	Qualcomm Audio	Hig	0.55	8.4	0.00	Mar 4, 2024	Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33033	Qualcomm Audio	Hig	0.55	8.4	0.00	Jan 2, 2024	Memory corruption in Audio during playback with speaker protection.
CVE-2023-33088	Qualcomm vdev	Hig	0.55	8.4	0.00	Dec 5, 2023	Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33022	Qualcomm HLOS	Hig	0.55	8.4	0.00	Dec 5, 2023	Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-24852	Qualcomm Core	Hig	0.55	8.4	0.00	Nov 7, 2023	Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2023-28538	Qualcomm WIN Product	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2022-33275	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40507	Qualcomm Core	Hig	0.55	8.4	0.01	Jun 6, 2023	Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-40532	Qualcomm WLAN	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25694	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25655	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-25695	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-22066	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 16, 2022	Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30288	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Oct 20, 2021	Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

CVE-2023-28547HigApr 1, 2024
Qualcomm
SPS Application
risk 0.55cvss 8.4epss 0.00
Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2023-43541HigMar 4, 2024
Qualcomm
Gfx engine
risk 0.55cvss 8.4epss 0.00
Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.
CVE-2023-33066HigMar 4, 2024
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33033HigJan 2, 2024
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio during playback with speaker protection.
CVE-2023-33088HigDec 5, 2023
Qualcomm
vdev
risk 0.55cvss 8.4epss 0.00
Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33022HigDec 5, 2023
Qualcomm
HLOS
risk 0.55cvss 8.4epss 0.00
Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-24852HigNov 7, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Core due to secure memory access by user while loading modem image.
CVE-2023-28538HigSep 5, 2023
Qualcomm
WIN Product
risk 0.55cvss 8.4epss 0.00
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2022-33275HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40507HigJun 6, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-40532HigApr 13, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25694HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25655HigMar 10, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-25695HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-22066HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30288HigOct 20, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

Page 2 of 10