Qca6698aq Firmware
by Qualcomm
CVEs (523)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-33053 | Hig | 0.55 | 8.4 | 0.00 | Dec 5, 2023 | Memory corruption in Kernel while parsing metadata. | ||
| CVE-2023-33022 | Hig | 0.55 | 8.4 | 0.00 | Dec 5, 2023 | Memory corruption in HLOS while invoking IOCTL calls from user-space. | ||
| CVE-2023-33074 | Hig | 0.55 | 8.4 | 0.00 | Nov 7, 2023 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. | ||
| CVE-2023-24852 | Hig | 0.55 | 8.4 | 0.00 | Nov 7, 2023 | Memory Corruption in Core due to secure memory access by user while loading modem image. | ||
| CVE-2023-33029 | Hig | 0.55 | 8.4 | 0.00 | Oct 3, 2023 | Memory corruption in DSP Service during a remote call from HLOS to DSP. | ||
| CVE-2023-24853 | Hig | 0.55 | 8.4 | 0.00 | Oct 3, 2023 | Memory Corruption in HLOS while registering for key provisioning notify. | ||
| CVE-2023-33021 | Hig | 0.55 | 8.4 | 0.00 | Sep 5, 2023 | Memory corruption in Graphics while processing user packets for command submission. | ||
| CVE-2022-33275 | Hig | 0.55 | 8.4 | 0.00 | Sep 5, 2023 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. | ||
| CVE-2023-28537 | Hig | 0.55 | 8.4 | 0.00 | Aug 8, 2023 | Memory corruption while allocating memory in COmxApeDec module in Audio. | ||
| CVE-2023-22666 | Hig | 0.55 | 8.4 | 0.00 | Aug 8, 2023 | Memory Corruption in Audio while playing amrwbplus clips with modified content. | ||
| CVE-2023-22667 | Hig | 0.55 | 8.4 | 0.00 | Jul 4, 2023 | Memory Corruption in Audio while allocating the ion buffer during the music playback. | ||
| CVE-2023-21672 | Hig | 0.55 | 8.4 | 0.00 | Jul 4, 2023 | Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions. | ||
| CVE-2023-21632 | Hig | 0.55 | 8.4 | 0.00 | Jun 6, 2023 | Memory corruption in Automotive GPU while querying a gsl memory node. | ||
| CVE-2023-21628 | Hig | 0.55 | 8.4 | 0.00 | Jun 6, 2023 | Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. | ||
| CVE-2022-40507 | Hig | 0.55 | 8.4 | 0.01 | Jun 6, 2023 | Memory corruption due to double free in Core while mapping HLOS address to the list. | ||
| CVE-2022-33307 | Hig | 0.55 | 8.4 | 0.00 | Jun 6, 2023 | Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. | ||
| CVE-2023-21665 | Hig | 0.55 | 8.4 | 0.00 | May 2, 2023 | Memory corruption in Graphics while importing a file. | ||
| CVE-2022-40532 | Hig | 0.55 | 8.4 | 0.00 | Apr 13, 2023 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. | ||
| CVE-2022-40531 | Hig | 0.55 | 8.4 | 0.00 | Mar 10, 2023 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. | ||
| CVE-2022-40530 | Hig | 0.55 | 8.4 | 0.00 | Mar 10, 2023 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
- risk 0.55cvss 8.4epss 0.00
Memory corruption in Kernel while parsing metadata.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in HLOS while invoking IOCTL calls from user-space.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio when SSR event is triggered after music playback is stopped.
- risk 0.55cvss 8.4epss 0.00
Memory Corruption in Core due to secure memory access by user while loading modem image.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in DSP Service during a remote call from HLOS to DSP.
- risk 0.55cvss 8.4epss 0.00
Memory Corruption in HLOS while registering for key provisioning notify.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while processing user packets for command submission.
- risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
- risk 0.55cvss 8.4epss 0.00
Memory corruption while allocating memory in COmxApeDec module in Audio.
- risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while playing amrwbplus clips with modified content.
- risk 0.55cvss 8.4epss 0.00
Memory Corruption in Audio while allocating the ion buffer during the music playback.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in Automotive GPU while querying a gsl memory node.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
- risk 0.55cvss 8.4epss 0.01
Memory corruption due to double free in Core while mapping HLOS address to the list.
- risk 0.55cvss 8.4epss 0.00
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while importing a file.
- risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
- risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
Page 5 of 27