Sd8885g Firmware

CVEs (373)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-21627	Qualcomm Trusted Execution Environment	Med	0.44	6.7	Aug 8, 2023	Memory corruption in Trusted Execution Environment while calling service API with invalid address.
CVE-2022-40519	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-25716	Qualcomm Multimedia Framework	Med	0.44	6.7	Jan 9, 2023	Memory corruption in Multimedia Framework due to unsafe access to the data members
CVE-2022-25676	Qualcomm Snapdragon	Med	0.44	6.8	Nov 15, 2022	Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666	Qualcomm Snapdragon	Med	0.44	6.7	Oct 19, 2022	Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665	Qualcomm Snapdragon	Med	0.44	6.8	Oct 19, 2022	Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2022-25653	Qualcomm Snapdragon	Med	0.44	6.8	Sep 16, 2022	Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35133	Qualcomm Snapdragon Mobile	Med	0.44	6.7	Sep 2, 2022	Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35120	Qualcomm Snapdragon Compute	Med	0.44	6.7	Jun 14, 2022	Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35118	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35098	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35092	Qualcomm Snapdragon	Med	0.44	6.7	Jun 14, 2022	Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30313	Qualcomm Snapdragon	Med	0.44	6.7	Jan 13, 2022	Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30266	Qualcomm Snapdragon	Med	0.44	6.7	Nov 12, 2021	Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30264	Qualcomm Snapdragon	Med	0.44	6.7	Nov 12, 2021	Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-1963	Qualcomm Snapdragon	Med	0.44	6.7	Sep 9, 2021	Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1961	Qualcomm Snapdragon	Med	0.44	6.7	Sep 9, 2021	Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1958	Qualcomm Snapdragon	Med	0.44	6.7	Sep 9, 2021	A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-1931	Qualcomm Snapdragon	Med	0.44	6.7	Jul 13, 2021	Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-1895	Qualcomm Snapdragon Consumer IOT	Med	0.44	6.8	May 7, 2021	Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

CVE-2023-21627MedAug 8, 2023
Qualcomm
Trusted Execution Environment
risk 0.44cvss 6.7epss 0.00
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
CVE-2022-40519MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-25716MedJan 9, 2023
Qualcomm
Multimedia Framework
risk 0.44cvss 6.7epss 0.00
Memory corruption in Multimedia Framework due to unsafe access to the data members
CVE-2022-25676MedNov 15, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2022-25653MedSep 16, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35133MedSep 2, 2022
Qualcomm
Snapdragon Mobile
risk 0.44cvss 6.7epss 0.00
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35120MedJun 14, 2022
Qualcomm
Snapdragon Compute
risk 0.44cvss 6.7epss 0.00
Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35118MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35098MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-35092MedJun 14, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30313MedJan 13, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30266MedNov 12, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30264MedNov 12, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-1963MedSep 9, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1961MedSep 9, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1958MedSep 9, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-1931MedJul 13, 2021
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-1895MedMay 7, 2021
Qualcomm
Snapdragon Consumer IOT
risk 0.44cvss 6.8epss 0.00
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Page 17 of 19