Wsa8832 Firmware

CVEs (548)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-33029	Qualcomm DSP Service	Hig	0.55	8.4	0.00	Oct 3, 2023	Memory corruption in DSP Service during a remote call from HLOS to DSP.
CVE-2023-24853	Qualcomm HLOS	Hig	0.55	8.4	0.00	Oct 3, 2023	Memory Corruption in HLOS while registering for key provisioning notify.
CVE-2023-24844	Qualcomm Core	Hig	0.55	8.4	0.00	Oct 3, 2023	Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
CVE-2023-28538	Qualcomm WIN Product	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2022-40534	Qualcomm Audio	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption due to improper validation of array index in Audio.
CVE-2022-33275	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-22667	Qualcomm Audio	Hig	0.55	8.4	0.00	Jul 4, 2023	Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-21672	Qualcomm Audio	Hig	0.55	8.4	0.00	Jul 4, 2023	Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40507	Qualcomm Core	Hig	0.55	8.4	0.01	Jun 6, 2023	Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-33307	Qualcomm Automotive	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
CVE-2022-40532	Qualcomm WLAN	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-33277	Qualcomm Modem	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-25696	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 16, 2022	Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25693	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Sep 16, 2022	Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-25656	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 16, 2022	Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22089	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 16, 2022	Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22081	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 16, 2022	Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

CVE-2023-33029HigOct 3, 2023
Qualcomm
DSP Service
risk 0.55cvss 8.4epss 0.00
Memory corruption in DSP Service during a remote call from HLOS to DSP.
CVE-2023-24853HigOct 3, 2023
Qualcomm
HLOS
risk 0.55cvss 8.4epss 0.00
Memory Corruption in HLOS while registering for key provisioning notify.
CVE-2023-24844HigOct 3, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
CVE-2023-28538HigSep 5, 2023
Qualcomm
WIN Product
risk 0.55cvss 8.4epss 0.00
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
CVE-2022-40534HigSep 5, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in Audio.
CVE-2022-33275HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-22667HigJul 4, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while allocating the ion buffer during the music playback.
CVE-2023-21672HigJul 4, 2023
Qualcomm
Audio
risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40507HigJun 6, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-33307HigJun 6, 2023
Qualcomm
Automotive
risk 0.55cvss 8.4epss 0.00
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
CVE-2022-40532HigApr 13, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-33277HigFeb 12, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-25696HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25693HigSep 16, 2022
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-25656HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22089HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22081HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

Page 5 of 28