Qca8081 Firmware
by Qualcomm
CVEs (739)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-33107 | Hig | 0.67 | 8.4 | 0.01 | KEV | Dec 5, 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. | |
| CVE-2023-33106 | Hig | 0.67 | 8.4 | 0.01 | KEV | Dec 5, 2023 | Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. | |
| CVE-2022-22071 | Hig | 0.67 | 8.4 | 0.00 | KEV | Jun 14, 2022 | Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &… | |
| CVE-2025-27034 | Cri | 0.64 | 9.8 | 0.00 | Sep 24, 2025 | Memory corruption while selecting the PLMN from SOR failed list. | ||
| CVE-2024-45569 | Cri | 0.64 | 9.8 | 0.00 | Feb 3, 2025 | Memory corruption while parsing the ML IE due to invalid frame content. | ||
| CVE-2024-33066 | Cri | 0.64 | 9.8 | 0.01 | Oct 7, 2024 | Memory corruption while redirecting log file to any file location with any file name. | ||
| CVE-2024-21473 | Cri | 0.64 | 9.8 | 0.01 | Apr 1, 2024 | Memory corruption while redirecting log file to any file location with any file name. | ||
| CVE-2023-43553 | Cri | 0.64 | 9.8 | 0.00 | Mar 4, 2024 | Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. | ||
| CVE-2023-43552 | Cri | 0.64 | 9.8 | 0.00 | Mar 4, 2024 | Memory corruption while processing MBSSID beacon containing several subelement IE. | ||
| CVE-2023-28582 | Cri | 0.64 | 9.8 | 0.00 | Mar 4, 2024 | Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake. | ||
| CVE-2023-33025 | Cri | 0.64 | 9.8 | 0.00 | Jan 2, 2024 | Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call. | ||
| CVE-2023-33083 | Cri | 0.64 | 9.8 | 0.01 | Dec 5, 2023 | Memory corruption in WLAN Host while processing RRM beacon on the AP. | ||
| CVE-2023-33082 | Cri | 0.64 | 9.8 | 0.01 | Dec 5, 2023 | Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. | ||
| CVE-2023-33045 | Cri | 0.64 | 9.8 | 0.00 | Nov 7, 2023 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. | ||
| CVE-2023-22388 | Cri | 0.64 | 9.8 | 0.00 | Nov 7, 2023 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. | ||
| CVE-2023-33028 | Cri | 0.64 | 9.8 | 0.01 | Oct 3, 2023 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. | ||
| CVE-2023-24855 | Cri | 0.64 | 9.8 | 0.01 | Oct 3, 2023 | Memory corruption in Modem while processing security related configuration before AS Security Exchange. | ||
| CVE-2022-40510 | Cri | 0.64 | 9.8 | 0.00 | Aug 8, 2023 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. | ||
| CVE-2022-33256 | Cri | 0.64 | 9.8 | 0.01 | Mar 10, 2023 | Memory corruption due to improper validation of array index in Multi-mode call processor. | ||
| CVE-2022-40514 | Cri | 0.64 | 9.8 | 0.00 | Feb 12, 2023 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
- risk 0.67cvss 8.4epss 0.01
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
- risk 0.67cvss 8.4epss 0.01
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
- risk 0.67cvss 8.4epss 0.00
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
- risk 0.64cvss 9.8epss 0.00
Memory corruption while selecting the PLMN from SOR failed list.
- risk 0.64cvss 9.8epss 0.00
Memory corruption while parsing the ML IE due to invalid frame content.
- risk 0.64cvss 9.8epss 0.01
Memory corruption while redirecting log file to any file location with any file name.
- risk 0.64cvss 9.8epss 0.01
Memory corruption while redirecting log file to any file location with any file name.
- risk 0.64cvss 9.8epss 0.00
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.
- risk 0.64cvss 9.8epss 0.00
Memory corruption while processing MBSSID beacon containing several subelement IE.
- risk 0.64cvss 9.8epss 0.00
Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.
- risk 0.64cvss 9.8epss 0.00
Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
- risk 0.64cvss 9.8epss 0.01
Memory corruption in WLAN Host while processing RRM beacon on the AP.
- risk 0.64cvss 9.8epss 0.01
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
- risk 0.64cvss 9.8epss 0.00
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
- risk 0.64cvss 9.8epss 0.00
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
- risk 0.64cvss 9.8epss 0.01
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
- risk 0.64cvss 9.8epss 0.01
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
- risk 0.64cvss 9.8epss 0.00
Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
- risk 0.64cvss 9.8epss 0.01
Memory corruption due to improper validation of array index in Multi-mode call processor.
- risk 0.64cvss 9.8epss 0.00
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
Page 1 of 37