Fastconnect 6900 Firmware
by Qualcomm
CVEs (594)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-21421 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption while processing escape code in API. | ||
| CVE-2024-45557 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation. | ||
| CVE-2024-43067 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory. | ||
| CVE-2024-43066 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption while handling file descriptor during listener registration/de-registration. | ||
| CVE-2024-43058 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption while processing IOCTL calls. | ||
| CVE-2025-21424 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while calling the NPU driver APIs concurrently. | ||
| CVE-2024-53034 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset. | ||
| CVE-2024-53033 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address. | ||
| CVE-2024-53024 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption in display driver while detaching a device. | ||
| CVE-2024-53023 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption may occur while accessing a variable during extended back to back tests. | ||
| CVE-2024-53014 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption may occur while validating ports and channels in Audio driver. | ||
| CVE-2024-53011 | Hig | 0.51 | 7.9 | 0.00 | Mar 3, 2025 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine. | ||
| CVE-2024-49836 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption may occur during the synchronization of the camera`s frame processing pipeline. | ||
| CVE-2024-45580 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while handling multuple IOCTL calls from userspace for remote invocation. | ||
| CVE-2024-43062 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization. | ||
| CVE-2024-43061 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive. | ||
| CVE-2024-43060 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP. | ||
| CVE-2024-43059 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. | ||
| CVE-2024-43057 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while processing command in Glink linux. | ||
| CVE-2024-43055 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while processing camera use case IOCTL call. |
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing escape code in API.
- risk 0.51cvss 7.8epss 0.00
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
- risk 0.51cvss 7.8epss 0.00
Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while handling file descriptor during listener registration/de-registration.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing IOCTL calls.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while calling the NPU driver APIs concurrently.
- risk 0.51cvss 7.8epss 0.00
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.
- risk 0.51cvss 7.8epss 0.00
Memory corruption in display driver while detaching a device.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur while accessing a variable during extended back to back tests.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur while validating ports and channels in Audio driver.
- risk 0.51cvss 7.9epss 0.00
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
- risk 0.51cvss 7.8epss 0.00
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing command in Glink linux.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing camera use case IOCTL call.
Page 13 of 30