Snapdragon 855\+ Firmware
by Qualcomm
CVEs (32)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-21631 | Hig | 0.49 | 7.5 | 0.00 | Jul 4, 2023 | Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network. | ||
| CVE-2023-28575 | Med | 0.44 | 6.7 | 0.00 | Aug 8, 2023 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it. | ||
| CVE-2023-21639 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client. | ||
| CVE-2023-21638 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory corruption in Video while calling APIs with different instance ID than the one received in initialization. | ||
| CVE-2023-21637 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory corruption in Linux while calling system configuration APIs. | ||
| CVE-2023-21635 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony. | ||
| CVE-2023-21633 | Med | 0.44 | 6.7 | 0.00 | Jul 4, 2023 | Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request. | ||
| CVE-2023-21629 | Med | 0.44 | 6.8 | 0.00 | Jul 4, 2023 | Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. | ||
| CVE-2024-23357 | Med | 0.40 | 6.2 | 0.00 | Aug 5, 2024 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. | ||
| CVE-2024-43056 | Med | 0.36 | 5.5 | 0.00 | Mar 3, 2025 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. | ||
| CVE-2024-43051 | Med | 0.36 | 5.5 | 0.00 | Mar 3, 2025 | Information disclosure while deriving keys for a session for any Widevine use case. | ||
| CVE-2024-33043 | Med | 0.36 | 5.5 | 0.00 | Sep 2, 2024 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. |
- risk 0.49cvss 7.5epss 0.00
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
- risk 0.44cvss 6.7epss 0.00
The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
- risk 0.44cvss 6.7epss 0.00
Memory corruption in Linux while calling system configuration APIs.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
- risk 0.44cvss 6.7epss 0.00
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
- risk 0.44cvss 6.8epss 0.00
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
- risk 0.40cvss 6.2epss 0.00
Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
- risk 0.36cvss 5.5epss 0.00
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
- risk 0.36cvss 5.5epss 0.00
Information disclosure while deriving keys for a session for any Widevine use case.
- risk 0.36cvss 5.5epss 0.00
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Page 2 of 2