Qca9888 Firmware

CVEs (296)

• CVE-2021-30317CriFeb 11, 2022
  Qualcomm

  Snapdragon
  risk 0.61cvss 9.3epss 0.01

  Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2023-28578CriMar 4, 2024
  Qualcomm

  Core services
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core Services while executing the command for removing a single event listener.

• CVE-2023-33072CriFeb 6, 2024
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core while processing control functions.

• CVE-2023-33030CriJan 2, 2024
  Qualcomm

  HLOS
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in HLOS while running playready use-case.

• CVE-2023-21651CriAug 8, 2023
  Qualcomm

  TEE
  risk 0.60cvss 9.3epss 0.00

  Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

• CVE-2022-33231CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to double free in core while initializing the encryption key.

• CVE-2022-33257CriMar 10, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

• CVE-2021-1942CriApr 1, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,…

• CVE-2021-30285CriJan 13, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

• CVE-2021-30276CriJan 3, 2022
  Qualcomm

  Snapdragon Compute
  risk 0.60cvss 9.3epss 0.00

  Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking

• CVE-2021-30275CriJan 3, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…

• CVE-2020-11301CriSep 8, 2021
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.1epss 0.11

  Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

• CVE-2020-11210CriApr 7, 2021
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

• CVE-2022-25652CriSep 16, 2022
  Qualcomm

  Snapdragon Wired Infrastructure and Networking
  risk 0.59cvss 9.0epss 0.00

  Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking

• CVE-2021-30339CriJun 14, 2022
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.0epss 0.00

  Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

• CVE-2021-1924CriNov 12, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.0epss 0.00

  Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

• CVE-2020-11159CriJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…

• CVE-2020-11126CriJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2020-11276CriFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,…

• CVE-2020-11275CriFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.59cvss 9.1epss 0.01

  Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…