Sa7255p Firmware

CVEs (796)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2023-28585	Qualcomm TEE Kernel	Hig	0.53	8.2	0.00		Dec 5, 2023	Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2022-40503	Qualcomm Bluetooth HOST	Hig	0.53	8.2	0.00		Apr 13, 2023	Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33271	Qualcomm WLAN	Hig	0.53	8.2	0.00		Feb 12, 2023	Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33255	Qualcomm Bluetooth HOST	Hig	0.53	8.2	0.00		Jan 9, 2023	Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
CVE-2022-33252	Qualcomm WLAN	Hig	0.53	8.2	0.00		Jan 9, 2023	Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
CVE-2022-33218	Qualcomm Automotive	Hig	0.53	8.2	0.00		Jan 9, 2023	Memory corruption in Automotive due to improper input validation.
CVE-2022-33268	Qualcomm Snapdragon	Hig	0.53	8.2	0.00		Dec 13, 2022	Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33235	Qualcomm WLAN Firmware	Hig	0.53	8.2	0.00		Dec 13, 2022	Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25706	Qualcomm Snapdragon	Hig	0.53	8.2	0.00		Sep 16, 2022	Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22062	Qualcomm Snapdragon	Hig	0.53	8.2	0.00		Sep 2, 2022	An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2021-30349	Qualcomm Snapdragon	Hig	0.53	8.2	0.00		Jun 14, 2022	Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2021-35117	Qualcomm Snapdragon Compute	Hig	0.53	8.2	0.01		Apr 1, 2022	An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-35088	Qualcomm Snapdragon	Hig	0.53	8.2	0.01		Apr 1, 2022	Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…
CVE-2020-11247	Qualcomm Snapdragon	Hig	0.53	8.2	0.01		Apr 7, 2021	Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2025-47357	Qualcomm QFPROM	Hig	0.52	8.0	0.00		Nov 4, 2025	Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2021-1906	Qualcomm Snapdragon	Med	0.52	6.2	0.01	KEV	May 7, 2021	Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2026-24080	Qualcomm fingerprint TA	Hig	0.51	7.8	0.00		Aug 4, 2026	Memory Corruption when handling malformed request parameters in the fingerprint TA.
CVE-2026-21366	Qualcomm Srv1l Firmware	Hig	0.51	7.8	0.00		Aug 4, 2026	Memory corruption while processing a packet with a size close to the maximum allowed value.
CVE-2025-59606	Qualcomm Secure Data Initialization	Hig	0.51	7.8	0.00		Jun 1, 2026	Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59605	Qualcomm Device Identifier Strings	Hig	0.51	7.8	0.00		Jun 1, 2026	Memory Corruption when processing device identifier strings that exceed the expected maximum length.

CVE-2023-28585HigDec 5, 2023
Qualcomm
TEE Kernel
risk 0.53cvss 8.2epss 0.00
Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2022-40503HigApr 13, 2023
Qualcomm
Bluetooth HOST
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33271HigFeb 12, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33255HigJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
CVE-2022-33252HigJan 9, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
CVE-2022-33218HigJan 9, 2023
Qualcomm
Automotive
risk 0.53cvss 8.2epss 0.00
Memory corruption in Automotive due to improper input validation.
CVE-2022-33268HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33235HigDec 13, 2022
Qualcomm
WLAN Firmware
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-25706HigSep 16, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22062HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
CVE-2021-30349HigJun 14, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,…
CVE-2021-35117HigApr 1, 2022
Qualcomm
Snapdragon Compute
risk 0.53cvss 8.2epss 0.01
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-35088HigApr 1, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon…
CVE-2020-11247HigApr 7, 2021
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.01
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2025-47357HigNov 4, 2025
Qualcomm
QFPROM
risk 0.52cvss 8.0epss 0.00
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2021-1906MedKEVMay 7, 2021
Qualcomm
Snapdragon
risk 0.52cvss 6.2epss 0.01
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon…
CVE-2026-24080HigAug 4, 2026
Qualcomm
fingerprint TA
risk 0.51cvss 7.8epss 0.00
Memory Corruption when handling malformed request parameters in the fingerprint TA.
CVE-2026-21366HigAug 4, 2026
Qualcomm
Srv1l Firmware
risk 0.51cvss 7.8epss 0.00
Memory corruption while processing a packet with a size close to the maximum allowed value.
CVE-2025-59606HigJun 1, 2026
Qualcomm
Secure Data Initialization
risk 0.51cvss 7.8epss 0.00
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVE-2025-59605HigJun 1, 2026
Qualcomm
Device Identifier Strings
risk 0.51cvss 7.8epss 0.00
Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Page 12 of 40