Csra6620 Firmware

CVEs (453)

• CVE-2023-33107HigKEVDec 5, 2023
  Qualcomm

  Graphics Linux
  risk 0.67cvss 8.4epss 0.01

  Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

• CVE-2023-33106HigKEVDec 5, 2023
  Qualcomm

  GPU
  risk 0.67cvss 8.4epss 0.01

  Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

• CVE-2022-22071HigKEVJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.67cvss 8.4epss 0.00

  Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-1905HigKEVMay 7, 2021
  Qualcomm

  Snapdragon
  risk 0.67cvss 8.4epss 0.01

  Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…

• CVE-2023-22388CriNov 7, 2023
  Qualcomm

  Multi-mode Call Processor
  risk 0.64cvss 9.8epss 0.00

  Memory Corruption in Multi-mode Call Processor while processing bit mask API.

• CVE-2022-40510CriAug 8, 2023
  Qualcomm

  Audio
  risk 0.64cvss 9.8epss 0.00

  Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

• CVE-2022-40514CriFeb 12, 2023
  Qualcomm

  WLAN Firmware
  risk 0.64cvss 9.8epss 0.00

  Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

• CVE-2022-25729CriFeb 12, 2023
  Qualcomm

  Modem
  risk 0.64cvss 9.8epss 0.00

  Memory corruption in modem due to improper length check while copying into memory

• CVE-2022-22088CriJan 9, 2023
  Qualcomm

  Bluetooth HOST
  risk 0.64cvss 9.8epss 0.01

  Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

• CVE-2022-25727CriNov 15, 2022
  Qualcomm

  Snapdragon Consumer IOT
  risk 0.64cvss 9.8epss 0.00

  Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

• CVE-2022-25748CriOct 19, 2022
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.00

  Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

• CVE-2022-25720CriOct 19, 2022
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.00

  Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

• CVE-2022-25651CriJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• CVE-2021-35104CriJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

• CVE-2021-30351CriJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.04

  An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-1976CriSep 17, 2021
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

• CVE-2021-1972CriSep 8, 2021
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2020-11134CriJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…

• CVE-2020-11299CriMar 17, 2021
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• CVE-2020-11272CriFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…