VYPR

Sm6225 Firmware

by Qualcomm

CVEs (92)

  • CVE-2023-33080HigDec 5, 2023
    Qualcomm
    reassociation response management frame
    risk 0.49cvss 7.5epss 0.00

    Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.

  • CVE-2023-28555HigAug 8, 2023
    Qualcomm
    Audio
    risk 0.49cvss 7.5epss 0.00

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  • CVE-2023-21659HigJun 6, 2023
    Qualcomm
    WLAN Firmware
    risk 0.49cvss 7.5epss 0.00

    Transient DOS in WLAN Firmware while processing frames with missing header fields.

  • CVE-2022-40521HigJun 6, 2023
    Qualcomm
    Modem
    risk 0.49cvss 7.5epss 0.00

    Transient DOS due to improper authorization in Modem

  • CVE-2022-40504HigMay 2, 2023
    Qualcomm
    Modem
    risk 0.49cvss 7.5epss 0.00

    Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

  • CVE-2022-33305HigMay 2, 2023
    Qualcomm
    Modem
    risk 0.49cvss 7.5epss 0.00

    Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

  • CVE-2021-30353HigJan 13, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-30330HigJan 13, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-30307HigJan 13, 2022
    Snapdragon
    Snapdragon Auto
    risk 0.49cvss 7.5epss 0.01

    Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-30300HigJan 13, 2022
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

  • CVE-2021-30284HigNov 12, 2021
    Qualcomm
    Snapdragon
    risk 0.49cvss 7.5epss 0.01

    Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…

  • CVE-2021-30272HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2021-30271HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2021-30270HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.47cvss 7.3epss 0.00

    Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon…

  • CVE-2021-30269HigJan 3, 2022
    Qualcomm
    Snapdragon Compute
    risk 0.47cvss 7.3epss 0.00

    Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music,…

  • CVE-2020-11263HigJan 3, 2022
    Qualcomm
    Snapdragon Compute
    risk 0.47cvss 7.3epss 0.00

    An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

  • CVE-2022-40529HigJun 6, 2023
    Qualcomm
    kernel
    risk 0.46cvss 7.1epss 0.00

    Memory corruption due to improper access control in kernel while processing a mapping request from root process.

  • CVE-2022-40523HigJun 6, 2023
    Qualcomm
    kernel
    risk 0.46cvss 7.1epss 0.00

    Information disclosure in Kernel due to indirect branch misprediction.

  • CVE-2022-22076HigJun 6, 2023
    Qualcomm
    Core
    risk 0.46cvss 7.1epss 0.00

    information disclosure due to cryptographic issue in Core during RPMB read request.

  • CVE-2021-30278HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.46cvss 7.1epss 0.00

    Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and…

Page 4 of 5