Apq8037 Firmware

CVEs (64)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-33033	Qualcomm Audio	Hig	0.55	8.4	0.00	Jan 2, 2024	Memory corruption in Audio during playback with speaker protection.
CVE-2022-25694	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30261	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Sep 17, 2021	Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1890	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jul 13, 2021	Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1888	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jul 13, 2021	Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1886	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jul 13, 2021	Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon…
CVE-2020-11246	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Apr 7, 2021	A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2023-24849	Qualcomm Data Modem	Hig	0.53	8.2	0.00	Oct 3, 2023	Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848	Qualcomm Data Modem	Hig	0.53	8.2	0.00	Oct 3, 2023	Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385	Qualcomm Data Modem	Hig	0.53	8.2	0.00	Oct 3, 2023	Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-21625	Qualcomm Network Services	Hig	0.53	8.2	0.00	Aug 8, 2023	Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2020-11285	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	May 7, 2021	Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11247	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-11191	Qualcomm Snapdragon	Hig	0.53	8.2	0.01	Apr 7, 2021	Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2025-27053	Qualcomm Fastconnect 6900 Firmware	Hig	0.51	7.8	0.00	Oct 9, 2025	Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2023-33018	Qualcomm UIM	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-28550	Qualcomm MPP	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546	Qualcomm SPS Application	Hig	0.51	7.8	0.00	Dec 5, 2023	Memory Corruption in SPS Application while exporting public key in sorter TA.

CVE-2023-33033HigJan 2, 2024
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio during playback with speaker protection.
CVE-2022-25694HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30261HigSep 17, 2021
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1890HigJul 13, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1888HigJul 13, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1886HigJul 13, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon…
CVE-2020-11246HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2023-24849HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2023-21625HigAug 8, 2023
Qualcomm
Network Services
risk 0.53cvss 8.2epss 0.00
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2020-11285HigMay 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11247HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-11191HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2025-27053HigOct 9, 2025
Qualcomm
Fastconnect 6900 Firmware
risk 0.51cvss 7.8epss 0.00
Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2023-33018HigDec 5, 2023
Qualcomm
UIM
risk 0.51cvss 7.8epss 0.00
Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-28550HigDec 5, 2023
Qualcomm
MPP
risk 0.51cvss 7.8epss 0.00
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546HigDec 5, 2023
Qualcomm
SPS Application
risk 0.51cvss 7.8epss 0.00
Memory Corruption in SPS Application while exporting public key in sorter TA.

Page 2 of 4