Sm7125 Firmware

CVEs (23)

• CVE-2020-3639CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in…

• CVE-2020-11196CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

• CVE-2020-11193CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

• CVE-2020-11184CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M,…

• CVE-2023-28540CriOct 3, 2023
  Qualcomm

  Data Modem
  risk 0.59cvss 9.1epss 0.00

  Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

• CVE-2023-33022HigDec 5, 2023
  Qualcomm

  HLOS
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in HLOS while invoking IOCTL calls from user-space.

• CVE-2023-21669HigJun 6, 2023
  Qualcomm

  WLAN Host
  risk 0.53cvss 8.2epss 0.00

  Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

• CVE-2023-33018HigDec 5, 2023
  Qualcomm

  UIM
  risk 0.51cvss 7.8epss 0.00

  Memory corruption while using the UIM diag command to get the operators name.

• CVE-2023-33017HigDec 5, 2023
  Qualcomm

  UEFI Menu
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

• CVE-2023-28560HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

• CVE-2020-3632HigNov 12, 2020
  Qualcomm

  Snapdragon Compute
  risk 0.51cvss 7.8epss 0.00

  u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P,…

• CVE-2020-11207HigNov 12, 2020
  Qualcomm

  LibFastCV
  risk 0.51cvss 7.8epss 0.01

  Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655,…

• CVE-2020-11206HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.02

  Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410,…

• CVE-2020-11201HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.02

  Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P,…

• CVE-2020-11130HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,…

• CVE-2020-11127HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…

• CVE-2023-21659HigJun 6, 2023
  Qualcomm

  WLAN Firmware
  risk 0.49cvss 7.5epss 0.00

  Transient DOS in WLAN Firmware while processing frames with missing header fields.

• CVE-2022-40521HigJun 6, 2023
  Qualcomm

  Modem
  risk 0.49cvss 7.5epss 0.00

  Transient DOS due to improper authorization in Modem

• CVE-2022-40529HigJun 6, 2023
  Qualcomm

  kernel
  risk 0.46cvss 7.1epss 0.00

  Memory corruption due to improper access control in kernel while processing a mapping request from root process.

• CVE-2020-11132HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.46cvss 7.1epss 0.00

  u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure…