Sd455 Firmware

CVEs (149)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-1888	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Jul 13, 2021	Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1886	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Jul 13, 2021	Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1900	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Jun 9, 2021	Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-11267	Qualcomm Snapdragon	Hig	0.55	8.4	0.00		Jun 9, 2021	Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11242	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00		Apr 7, 2021	User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2023-24849	Qualcomm Data Modem	Hig	0.53	8.2	0.00		Oct 3, 2023	Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848	Qualcomm Data Modem	Hig	0.53	8.2	0.00		Oct 3, 2023	Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385	Qualcomm Data Modem	Hig	0.53	8.2	0.00		Oct 3, 2023	Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2022-33271	Qualcomm WLAN	Hig	0.53	8.2	0.00		Feb 12, 2023	Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2020-11285	Qualcomm Snapdragon	Hig	0.53	8.2	0.01		May 7, 2021	Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251	Qualcomm Snapdragon	Hig	0.53	8.2	0.01		Apr 7, 2021	Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11191	Qualcomm Snapdragon	Hig	0.53	8.2	0.01		Apr 7, 2021	Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2021-1906	Qualcomm Snapdragon	Med	0.52	6.2	0.01	KEV	May 7, 2021	Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2023-33018	Qualcomm UIM	Hig	0.51	7.8	0.00		Dec 5, 2023	Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-28551	Qualcomm Modem	Hig	0.51	7.8	0.00		Dec 5, 2023	Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
CVE-2023-28550	Qualcomm MPP	Hig	0.51	7.8	0.00		Dec 5, 2023	Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546	Qualcomm SPS Application	Hig	0.51	7.8	0.00		Dec 5, 2023	Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28567	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00		Sep 5, 2023	Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28565	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00		Sep 5, 2023	Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28564	Qualcomm WLAN HAL	Hig	0.51	7.8	0.00		Sep 5, 2023	Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

CVE-2021-1888HigJul 13, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1886HigJul 13, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1900HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2020-11267HigJun 9, 2021
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2020-11242HigApr 7, 2021
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2023-24849HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
CVE-2023-24848HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
CVE-2023-22385HigOct 3, 2023
Qualcomm
Data Modem
risk 0.53cvss 8.2epss 0.00
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
CVE-2022-33271HigFeb 12, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2020-11285HigMay 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11251HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon…
CVE-2020-11191HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…
CVE-2021-1906MedKEVMay 7, 2021
Qualcomm
Snapdragon
risk 0.52cvss 6.2epss 0.01
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2023-33018HigDec 5, 2023
Qualcomm
UIM
risk 0.51cvss 7.8epss 0.00
Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-28551HigDec 5, 2023
Qualcomm
Modem
risk 0.51cvss 7.8epss 0.00
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
CVE-2023-28550HigDec 5, 2023
Qualcomm
MPP
risk 0.51cvss 7.8epss 0.00
Memory corruption in MPP performance while accessing DSM watermark using external memory address.
CVE-2023-28546HigDec 5, 2023
Qualcomm
SPS Application
risk 0.51cvss 7.8epss 0.00
Memory Corruption in SPS Application while exporting public key in sorter TA.
CVE-2023-28567HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command through WMI interfaces.
CVE-2023-28565HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
CVE-2023-28564HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

Page 4 of 8