Sm6125 Firmware

CVEs (22)

• CVE-2020-3639CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in…

• CVE-2020-11196CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

• CVE-2020-11193CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in…

• CVE-2020-11184CriNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDX55, SDX55M,…

• CVE-2023-33054CriDec 5, 2023
  Qualcomm

  GNSS assistance data
  risk 0.59cvss 9.1epss 0.00

  Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

• CVE-2023-28540CriOct 3, 2023
  Qualcomm

  Data Modem
  risk 0.59cvss 9.1epss 0.00

  Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

• CVE-2023-33022HigDec 5, 2023
  Qualcomm

  HLOS
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in HLOS while invoking IOCTL calls from user-space.

• CVE-2023-33018HigDec 5, 2023
  Qualcomm

  UIM
  risk 0.51cvss 7.8epss 0.00

  Memory corruption while using the UIM diag command to get the operators name.

• CVE-2023-33017HigDec 5, 2023
  Qualcomm

  UEFI Menu
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

• CVE-2023-28560HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.51cvss 7.8epss 0.00

  Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

• CVE-2020-11207HigNov 12, 2020
  Qualcomm

  LibFastCV
  risk 0.51cvss 7.8epss 0.01

  Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655,…

• CVE-2020-11206HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.02

  Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MSM8998, QCM4290, QCM6125, QCS410,…

• CVE-2020-11201HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.02

  Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P,…

• CVE-2020-11175HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

• CVE-2020-11130HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.51cvss 7.8epss 0.00

  u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X,…

• CVE-2023-21659HigJun 6, 2023
  Qualcomm

  WLAN Firmware
  risk 0.49cvss 7.5epss 0.00

  Transient DOS in WLAN Firmware while processing frames with missing header fields.

• CVE-2022-40521HigJun 6, 2023
  Qualcomm

  Modem
  risk 0.49cvss 7.5epss 0.00

  Transient DOS due to improper authorization in Modem

• CVE-2023-33070HigDec 5, 2023
  Qualcomm

  Automotive OS
  risk 0.46cvss 7.1epss 0.00

  Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

• CVE-2022-40529HigJun 6, 2023
  Qualcomm

  kernel
  risk 0.46cvss 7.1epss 0.00

  Memory corruption due to improper access control in kernel while processing a mapping request from root process.

• CVE-2020-11132HigNov 12, 2020
  Qualcomm

  Snapdragon
  risk 0.46cvss 7.1epss 0.00

  u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure…