Sd8cx Firmware

CVEs (339)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-28544	Qualcomm WLAN	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVE-2023-21664	Qualcomm Core Platform	Hig	0.51	7.8	Sep 5, 2023	Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21662	Qualcomm Core Platform	Hig	0.51	7.8	Sep 5, 2023	Memory corruption in Core Platform while printing the response buffer in log.
CVE-2022-33242	Qualcomm audio PD	Hig	0.51	7.8	Mar 10, 2023	Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
CVE-2022-25660	Qualcomm Snapdragon	Hig	0.51	7.8	Oct 19, 2022	Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22094	Qualcomm Snapdragon Compute	Hig	0.51	7.8	Sep 16, 2022	memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22093	Qualcomm Snapdragon	Hig	0.51	7.8	Sep 16, 2022	Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22070	Qualcomm Snapdragon	Hig	0.51	7.8	Sep 2, 2022	Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30303	Qualcomm Snapdragon	Hig	0.51	7.8	Jan 3, 2022	Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2021-30289	Qualcomm Snapdragon	Hig	0.51	7.8	Jan 3, 2022	Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30268	Qualcomm Snapdragon	Hig	0.51	7.8	Jan 3, 2022	Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-30267	Qualcomm Snapdragon	Hig	0.51	7.8	Jan 3, 2022	Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30259	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-30255	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1979	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1973	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1921	Qualcomm Snapdragon	Hig	0.51	7.8	Nov 12, 2021	Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1959	Qualcomm Snapdragon	Hig	0.51	7.8	Oct 20, 2021	Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1952	Qualcomm Snapdragon	Hig	0.51	7.8	Sep 9, 2021	Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
CVE-2021-1923	Qualcomm Snapdragon	Hig	0.51	7.8	Sep 8, 2021	Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT

CVE-2023-28544HigSep 5, 2023
Qualcomm
WLAN
risk 0.51cvss 7.8epss 0.00
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
CVE-2023-21664HigSep 5, 2023
Qualcomm
Core Platform
risk 0.51cvss 7.8epss 0.00
Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21662HigSep 5, 2023
Qualcomm
Core Platform
risk 0.51cvss 7.8epss 0.00
Memory corruption in Core Platform while printing the response buffer in log.
CVE-2022-33242HigMar 10, 2023
Qualcomm
audio PD
risk 0.51cvss 7.8epss 0.00
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
CVE-2022-25660HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22094HigSep 16, 2022
Qualcomm
Snapdragon Compute
risk 0.51cvss 7.8epss 0.00
memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22093HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22070HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30303HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…
CVE-2021-30289HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30268HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-30267HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30259HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…
CVE-2021-30255HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2021-1979HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1973HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1921HigNov 12, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1959HigOct 20, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1952HigSep 9, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
CVE-2021-1923HigSep 8, 2021
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT

Page 8 of 17