Sdm660 Firmware

CVEs (466)

• CVE-2017-18170HigOct 23, 2018
  Qualcomm

  Snapdragon Mobile
  risk 0.57cvss 8.8epss 0.01

  Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD…

• CVE-2019-10529HigNov 6, 2019
  Qualcomm

  Snapdragon
  risk 0.56cvss 8.1epss 0.02

  Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2022-33275HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

• CVE-2023-21628HigJun 6, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

• CVE-2022-40507HigJun 6, 2023
  Qualcomm

  Core
  risk 0.55cvss 8.4epss 0.01

  Memory corruption due to double free in Core while mapping HLOS address to the list.

• CVE-2023-21666HigMay 2, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

• CVE-2023-21665HigMay 2, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in Graphics while importing a file.

• CVE-2022-40532HigApr 13, 2023
  Qualcomm

  WLAN
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

• CVE-2022-40503HigApr 13, 2023
  Qualcomm

  Bluetooth HOST
  risk 0.53cvss 8.2epss 0.00

  Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

• CVE-2019-10494HigDec 12, 2019
  Qualcomm

  Snapdragon
  risk 0.53cvss 8.1epss 0.00

  Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2019-10510HigSep 30, 2019
  Qualcomm

  Snapdragon Mobile
  risk 0.53cvss 8.2epss 0.01

  BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 /…

• CVE-2015-9222HigApr 18, 2018
  Qualcomm

  Snapdragon
  risk 0.52cvss 7.5epss 0.04

  In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630,…

• CVE-2023-33018HigDec 5, 2023
  Qualcomm

  UIM
  risk 0.51cvss 7.8epss 0.00

  Memory corruption while using the UIM diag command to get the operators name.

• CVE-2023-33059HigNov 7, 2023
  Qualcomm

  ADSP
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Audio while processing the VOC packet data from ADSP.

• CVE-2023-33031HigNov 7, 2023
  Qualcomm

  Automotive Audio
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

• CVE-2023-21670HigJun 6, 2023
  Qualcomm

  Sxr2230p Firmware
  risk 0.51cvss 7.8epss 0.00

  Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

• CVE-2023-21657HigJun 6, 2023
  Qualcomm

  Audio
  risk 0.51cvss 7.8epss 0.00

  Memoru corruption in Audio when ADSP sends input during record use case.

• CVE-2022-33264HigJun 6, 2023
  Qualcomm

  Modem
  risk 0.51cvss 7.9epss 0.00

  Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

• CVE-2020-11207HigNov 12, 2020
  Qualcomm

  LibFastCV
  risk 0.51cvss 7.8epss 0.01

  Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655,…

• CVE-2020-11206HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.02

  Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410,…