Qcn9024 Firmware

CVEs (455)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-33021	Qualcomm Graphics	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption in Graphics while processing user packets for command submission.
CVE-2022-33275	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Sep 5, 2023	Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-21628	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40522	Linux Linux Networking	Hig	0.55	8.4	0.00	Jun 6, 2023	Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVE-2022-40507	Qualcomm Core	Hig	0.55	8.4	0.01	Jun 6, 2023	Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2023-21665	Qualcomm Wcd9380 Firmware	Hig	0.55	8.4	0.00	May 2, 2023	Memory corruption in Graphics while importing a file.
CVE-2022-40532	Qualcomm WLAN	Hig	0.55	8.4	0.00	Apr 13, 2023	Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530	Qualcomm WLAN	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25709	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694	Qualcomm Modem	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25655	Qualcomm WLAN HAL	Hig	0.55	8.4	0.00	Mar 10, 2023	Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33277	Qualcomm Modem	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33243	Qualcomm IPC	Hig	0.55	8.4	0.00	Feb 12, 2023	Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40520	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40517	Qualcomm Core	Hig	0.55	8.4	0.00	Jan 9, 2023	Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516	Qualcomm Core	Hig	0.55	8.4	0.01	Jan 9, 2023	Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-33276	Qualcomm Modem	Hig	0.55	8.4	0.00	Jan 9, 2023	Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
CVE-2022-25695	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

CVE-2023-33021HigSep 5, 2023
Qualcomm
Graphics
risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while processing user packets for command submission.
CVE-2022-33275HigSep 5, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
CVE-2023-21628HigJun 6, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2022-40522HigJun 6, 2023
Linux
Linux Networking
risk 0.55cvss 8.4epss 0.00
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
CVE-2022-40507HigJun 6, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2023-21665HigMay 2, 2023
Qualcomm
Wcd9380 Firmware
risk 0.55cvss 8.4epss 0.00
Memory corruption in Graphics while importing a file.
CVE-2022-40532HigApr 13, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
CVE-2022-40531HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
CVE-2022-40530HigMar 10, 2023
Qualcomm
WLAN
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
CVE-2022-25709HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
CVE-2022-25694HigMar 10, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-25655HigMar 10, 2023
Qualcomm
WLAN HAL
risk 0.55cvss 8.4epss 0.00
Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
CVE-2022-33277HigFeb 12, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
CVE-2022-33243HigFeb 12, 2023
Qualcomm
IPC
risk 0.55cvss 8.4epss 0.00
Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-40520HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption due to stack-based buffer overflow in Core
CVE-2022-40517HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.00
Memory corruption in core due to stack-based buffer overflow
CVE-2022-40516HigJan 9, 2023
Qualcomm
Core
risk 0.55cvss 8.4epss 0.01
Memory corruption in Core due to stack-based buffer overflow.
CVE-2022-33276HigJan 9, 2023
Qualcomm
Modem
risk 0.55cvss 8.4epss 0.00
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
CVE-2022-25695HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

Page 5 of 23