Wcd9385 Firmware

CVEs (1,105)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-21633	Qualcomm Linux	Med	0.44	6.7	Jul 4, 2023	Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-21629	Qualcomm Modem	Med	0.44	6.8	Jul 4, 2023	Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
CVE-2022-33263	Qualcomm Core	Med	0.44	6.7	Jun 6, 2023	Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
CVE-2022-33230	Qualcomm FM Host	Med	0.44	6.7	Jun 6, 2023	Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
CVE-2022-33226	Qualcomm Core	Med	0.44	6.7	Jun 6, 2023	Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
CVE-2022-33224	Qualcomm Core	Med	0.44	6.7	Jun 6, 2023	Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
CVE-2022-33302	Qualcomm User Identity Module	Med	0.44	6.8	Apr 13, 2023	Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33298	Qualcomm Modem	Med	0.44	6.7	Apr 13, 2023	Memory corruption due to use after free in Modem while modem initialization.
CVE-2022-33289	Qualcomm Modem	Med	0.44	6.8	Apr 13, 2023	Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33245	Qualcomm WLAN	Med	0.44	6.7	Mar 10, 2023	Memory corruption in WLAN due to use after free
CVE-2022-33221	Qualcomm Trusted Execution Environment	Med	0.44	6.8	Feb 12, 2023	Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVE-2022-40519	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-40518	Qualcomm Core	Med	0.44	6.8	Jan 9, 2023	Information disclosure due to buffer overread in Core
CVE-2022-25716	Qualcomm Multimedia Framework	Med	0.44	6.7	Jan 9, 2023	Memory corruption in Multimedia Framework due to unsafe access to the data members
CVE-2022-25676	Qualcomm Snapdragon	Med	0.44	6.8	Nov 15, 2022	Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666	Qualcomm Snapdragon	Med	0.44	6.7	Oct 19, 2022	Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665	Qualcomm Snapdragon	Med	0.44	6.8	Oct 19, 2022	Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2022-25653	Qualcomm Snapdragon	Med	0.44	6.8	Sep 16, 2022	Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35133	Qualcomm Snapdragon Mobile	Med	0.44	6.7	Sep 2, 2022	Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35109	Qualcomm Snapdragon Mobile	Med	0.44	6.8	Sep 2, 2022	Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile

CVE-2023-21633MedJul 4, 2023
Qualcomm
Linux
risk 0.44cvss 6.7epss 0.00
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-21629MedJul 4, 2023
Qualcomm
Modem
risk 0.44cvss 6.8epss 0.00
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
CVE-2022-33263MedJun 6, 2023
Qualcomm
Core
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
CVE-2022-33230MedJun 6, 2023
Qualcomm
FM Host
risk 0.44cvss 6.7epss 0.00
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
CVE-2022-33226MedJun 6, 2023
Qualcomm
Core
risk 0.44cvss 6.7epss 0.00
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
CVE-2022-33224MedJun 6, 2023
Qualcomm
Core
risk 0.44cvss 6.7epss 0.00
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
CVE-2022-33302MedApr 13, 2023
Qualcomm
User Identity Module
risk 0.44cvss 6.8epss 0.00
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
CVE-2022-33298MedApr 13, 2023
Qualcomm
Modem
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in Modem while modem initialization.
CVE-2022-33289MedApr 13, 2023
Qualcomm
Modem
risk 0.44cvss 6.8epss 0.00
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
CVE-2022-33245MedMar 10, 2023
Qualcomm
WLAN
risk 0.44cvss 6.7epss 0.00
Memory corruption in WLAN due to use after free
CVE-2022-33221MedFeb 12, 2023
Qualcomm
Trusted Execution Environment
risk 0.44cvss 6.8epss 0.00
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
CVE-2022-40519MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-40518MedJan 9, 2023
Qualcomm
Core
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer overread in Core
CVE-2022-25716MedJan 9, 2023
Qualcomm
Multimedia Framework
risk 0.44cvss 6.7epss 0.00
Memory corruption in Multimedia Framework due to unsafe access to the data members
CVE-2022-25676MedNov 15, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25666MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.7epss 0.00
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2022-25665MedOct 19, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
CVE-2022-25653MedSep 16, 2022
Qualcomm
Snapdragon
risk 0.44cvss 6.8epss 0.00
Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35133MedSep 2, 2022
Qualcomm
Snapdragon Mobile
risk 0.44cvss 6.7epss 0.00
Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35109MedSep 2, 2022
Qualcomm
Snapdragon Mobile
risk 0.44cvss 6.8epss 0.00
Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile

Page 48 of 56