Sm4375 Firmware

CVEs (83)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-40510	Qualcomm Audio	Cri	0.64	9.8	0.00		Aug 8, 2023	Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-22088	Qualcomm Bluetooth HOST	Cri	0.64	9.8	0.01		Jan 9, 2023	Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
CVE-2022-25748	Qualcomm Snapdragon	Cri	0.64	9.8	0.00		Oct 19, 2022	Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2023-33063	Qualcomm DSP Service	Hig	0.63	7.8	0.01	KEV	Dec 5, 2023	Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2023-21651	Qualcomm TEE	Cri	0.60	9.3	0.00		Aug 8, 2023	Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
CVE-2022-33231	Qualcomm Core	Cri	0.60	9.3	0.00		Apr 13, 2023	Memory corruption due to double free in core while initializing the encryption key.
CVE-2023-33054	Qualcomm GNSS assistance data	Cri	0.59	9.1	0.00		Dec 5, 2023	Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
CVE-2023-28540	Qualcomm Data Modem	Cri	0.59	9.1	0.00		Oct 3, 2023	Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
CVE-2023-33022	Qualcomm HLOS	Hig	0.55	8.4	0.00		Dec 5, 2023	Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-33029	Qualcomm DSP Service	Hig	0.55	8.4	0.00		Oct 3, 2023	Memory corruption in DSP Service during a remote call from HLOS to DSP.
CVE-2022-33275	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00		Sep 5, 2023	Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-28537	Qualcomm Audio	Hig	0.55	8.4	0.00		Aug 8, 2023	Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22666	Qualcomm Audio	Hig	0.55	8.4	0.00		Aug 8, 2023	Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00		Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40507	Qualcomm Core	Hig	0.55	8.4	0.01		Jun 6, 2023	Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2023-21665	Qualcomm Wcd9380 Firmware	Hig	0.55	8.4	0.00		May 2, 2023	Memory corruption in Graphics while importing a file.
CVE-2022-40532	Qualcomm WLAN	Hig	0.55	8.4	0.00		Apr 13, 2023	Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-25695	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Dec 13, 2022	Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25743	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Nov 15, 2022	Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2022-40510CriAug 8, 2023
Qualcomm
Audio
risk 0.64cvss 9.8epss 0.00
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-22088CriJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.64cvss 9.8epss 0.01
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
CVE-2022-25748CriOct 19, 2022
Qualcomm
Snapdragon
risk 0.64cvss 9.8epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2023-33063HigKEVDec 5, 2023
Qualcomm
DSP Service
risk 0.63cvss 7.8epss 0.01
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2023-21651CriAug 8, 2023
Qualcomm
TEE
risk 0.60cvss 9.3epss 0.00
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
CVE-2022-33231CriApr 13, 2023
Qualcomm
Core
risk 0.60cvss 9.3epss 0.00
Memory corruption due to double free in core while initializing the encryption key.
CVE-2023-33054CriDec 5, 2023
Qualcomm
GNSS assistance data
risk 0.59cvss 9.1epss 0.00
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
CVE-2023-28540CriOct 3, 2023
Qualcomm
Data Modem
risk 0.59cvss 9.1epss 0.00
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
CVE-2023-33022HigDec 5, 2023
Qualcomm
HLOS
risk 0.55cvss 8.4epss 0.00
Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-33029HigOct 3, 2023
Qualcomm
DSP Service
risk 0.55cvss 8.4epss 0.00
Memory corruption in DSP Service during a remote call from HLOS to DSP.
CVE-2022-33275HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-28537HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-22666HigAug 8, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40507HigJun 6, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2023-21665HigMay 2, 2023
Qualcomm
Wcd9380 Firmware
risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while importing a file.
CVE-2022-40532HigApr 13, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-25695HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25743HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Page 1 of 5