Sa8540p Firmware

CVEs (238)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-33039	Qualcomm Automotive Display	Hig	0.55	8.4	0.00	Oct 3, 2023	Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
CVE-2023-24853	Qualcomm HLOS	Hig	0.55	8.4	0.00	Oct 3, 2023	Memory Corruption in HLOS while registering for key provisioning notify.
CVE-2023-21632	Qualcomm Automotive GPU	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in Automotive GPU while querying a gsl memory node.
CVE-2022-40507	Qualcomm Core	Hig	0.55	8.4	0.01	Jun 6, 2023	Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-33307	Qualcomm Automotive	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
CVE-2023-21642	Qualcomm HAB Memory management	Hig	0.55	8.4	0.00	May 2, 2023	Memory corruption in HAB Memory management due to broad system privileges via physical address.
CVE-2022-33282	Qualcomm Automotive Multimedia	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2022-40520	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40517	Qualcomm Core	Hig	0.55	8.4	0.00	Jan 9, 2023	Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-25681	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-33210	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Oct 19, 2022	Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto
CVE-2022-25661	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Oct 19, 2022	Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22106	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Sep 2, 2022	Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
CVE-2022-22104	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Sep 2, 2022	Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
CVE-2022-22100	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Sep 2, 2022	Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
CVE-2022-22099	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Sep 2, 2022	Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
CVE-2021-35132	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Sep 2, 2022	Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35114	Qualcomm Snapdragon Auto	Hig	0.55	8.4	0.00	Jun 14, 2022	Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto
CVE-2021-35115	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Apr 1, 2022	Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

CVE-2023-33039HigOct 3, 2023
Qualcomm
Automotive Display
risk 0.55cvss 8.4epss 0.00
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
CVE-2023-24853HigOct 3, 2023
Qualcomm
HLOS
risk 0.55cvss 8.4epss 0.00
Memory Corruption in HLOS while registering for key provisioning notify.
CVE-2023-21632HigJun 6, 2023
Qualcomm
Automotive GPU
risk 0.55cvss 8.4epss 0.00
Memory corruption in Automotive GPU while querying a gsl memory node.
CVE-2022-40507HigJun 6, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2022-33307HigJun 6, 2023
Qualcomm
Automotive
risk 0.55cvss 8.4epss 0.00
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
CVE-2023-21642HigMay 2, 2023
Qualcomm
HAB Memory management
risk 0.55cvss 8.4epss 0.00
Memory corruption in HAB Memory management due to broad system privileges via physical address.
CVE-2022-33282HigApr 13, 2023
Qualcomm
Automotive Multimedia
risk 0.55cvss 8.4epss 0.00
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2022-40520HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40517HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-25681HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-33210HigOct 19, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto
CVE-2022-25661HigOct 19, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-22106HigSep 2, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
CVE-2022-22104HigSep 2, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto
CVE-2022-22100HigSep 2, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
CVE-2022-22099HigSep 2, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
CVE-2021-35132HigSep 2, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-35114HigJun 14, 2022
Qualcomm
Snapdragon Auto
risk 0.55cvss 8.4epss 0.00
Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto
CVE-2021-35115HigApr 1, 2022
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

Page 3 of 12