Qcx315 Firmware

CVEs (132)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-33285	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33253	Qualcomm WLAN	Hig	0.49	7.5	0.00	Jan 9, 2023	Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
CVE-2022-33238	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25702	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25692	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25685	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-33239	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33237	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Nov 15, 2022	Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2022-25749	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Oct 19, 2022	Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2022-25736	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Oct 19, 2022	Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVE-2021-30344	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30340	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jun 14, 2022	Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30332	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Apr 1, 2022	Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30329	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Apr 1, 2022	Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30328	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Apr 1, 2022	Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30326	Qualcomm Snapdragon Compute	Hig	0.49	7.5	0.01	Feb 11, 2022	Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30353	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jan 13, 2022	Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30307	Snapdragon Snapdragon Auto	Hig	0.49	7.5	0.01	Jan 13, 2022	Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30301	Qualcomm Snapdragon Mobile	Hig	0.49	7.5	0.01	Jan 13, 2022	Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30300	Qualcomm Snapdragon	Hig	0.49	7.5	0.01	Jan 13, 2022	Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

CVE-2022-33285HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
CVE-2022-33253HigJan 9, 2023
Qualcomm
WLAN
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
CVE-2022-33238HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25702HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25692HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25685HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-33239HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33237HigNov 15, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…
CVE-2022-25749HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2022-25736HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…
CVE-2021-30344HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30340HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30332HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30329HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30328HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30326HigFeb 11, 2022
Qualcomm
Snapdragon Compute
risk 0.49cvss 7.5epss 0.01
Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30353HigJan 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30307HigJan 13, 2022
Snapdragon
Snapdragon Auto
risk 0.49cvss 7.5epss 0.01
Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30301HigJan 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.49cvss 7.5epss 0.01
Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30300HigJan 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.01
Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

Page 5 of 7