Qca8081 Firmware

CVEs (739)

• CVE-2023-21629MedJul 4, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.8epss 0.00

  Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

• CVE-2022-33302MedApr 13, 2023
  Qualcomm

  User Identity Module
  risk 0.44cvss 6.8epss 0.00

  Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

• CVE-2022-33289MedApr 13, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.8epss 0.00

  Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

• CVE-2022-40519MedJan 9, 2023
  Qualcomm

  Core
  risk 0.44cvss 6.8epss 0.00

  Information disclosure due to buffer overread in Core

• CVE-2022-40518MedJan 9, 2023
  Qualcomm

  Core
  risk 0.44cvss 6.8epss 0.00

  Information disclosure due to buffer overread in Core

• CVE-2022-25677MedDec 13, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

• CVE-2022-25666MedOct 19, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

• CVE-2022-25665MedOct 19, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.8epss 0.00

  Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile

• CVE-2021-35133MedSep 2, 2022
  Qualcomm

  Snapdragon Mobile
  risk 0.44cvss 6.7epss 0.00

  Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• CVE-2021-35092MedJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-30325MedFeb 11, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired…

• CVE-2021-30324MedFeb 11, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30313MedJan 13, 2022
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30266MedNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2021-30265MedNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2021-30264MedNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon…

• CVE-2021-1895MedMay 7, 2021
  Qualcomm

  Snapdragon Consumer IOT
  risk 0.44cvss 6.8epss 0.00

  Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

• CVE-2020-11198MedFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.44cvss 6.7epss 0.00

  Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

• CVE-2025-47333MedJan 7, 2026
  Qualcomm

  cryptographic driver
  risk 0.43cvss 6.6epss 0.00

  Memory corruption while handling buffer mapping operations in the cryptographic driver.

• CVE-2023-28539MedOct 3, 2023
  Qualcomm

  WLAN Host
  risk 0.43cvss 6.6epss 0.00

  Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.