Aqt1000 Firmware
by Qualcomm
CVEs (620)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-49842 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions. | ||
| CVE-2024-49841 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling. | ||
| CVE-2024-49835 | Hig | 0.51 | 7.8 | 0.00 | May 6, 2025 | Memory corruption while reading secure file. | ||
| CVE-2025-21441 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. | ||
| CVE-2025-21440 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. | ||
| CVE-2025-21423 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. | ||
| CVE-2025-21421 | Hig | 0.51 | 7.8 | 0.00 | Apr 7, 2025 | Memory corruption while processing escape code in API. | ||
| CVE-2025-21424 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption while calling the NPU driver APIs concurrently. | ||
| CVE-2024-53014 | Hig | 0.51 | 7.8 | 0.00 | Mar 3, 2025 | Memory corruption may occur while validating ports and channels in Audio driver. | ||
| CVE-2024-45561 | Hig | 0.51 | 7.8 | 0.00 | Feb 3, 2025 | Memory corruption while handling IOCTL call from user-space to set latency level. | ||
| CVE-2024-45560 | Hig | 0.51 | 7.8 | 0.00 | Feb 3, 2025 | Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer. | ||
| CVE-2024-45542 | Hig | 0.51 | 7.8 | 0.00 | Jan 6, 2025 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. | ||
| CVE-2024-45541 | Hig | 0.51 | 7.8 | 0.00 | Jan 6, 2025 | Memory corruption when IOCTL call is invoked from user-space to read board data. | ||
| CVE-2024-43050 | Hig | 0.51 | 7.8 | 0.00 | Dec 2, 2024 | Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. | ||
| CVE-2018-11816 | Hig | 0.51 | 7.8 | 0.00 | Nov 26, 2024 | Crafted Binder Request Causes Heap UAF in MediaServer | ||
| CVE-2024-38423 | Hig | 0.51 | 7.8 | 0.00 | Nov 4, 2024 | Memory corruption while processing GPU page table switch. | ||
| CVE-2024-38422 | Hig | 0.51 | 7.8 | 0.00 | Nov 4, 2024 | Memory corruption while processing voice packet with arbitrary data received from ADSP. | ||
| CVE-2024-38407 | Hig | 0.51 | 7.8 | 0.00 | Nov 4, 2024 | Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver. | ||
| CVE-2024-38406 | Hig | 0.51 | 7.8 | 0.00 | Nov 4, 2024 | Memory corruption while handling IOCTL calls in JPEG Encoder driver. | ||
| CVE-2024-33052 | Hig | 0.51 | 7.8 | 0.00 | Sep 2, 2024 | Memory corruption when user provides data for FM HCI command control operations. |
- risk 0.51cvss 7.8epss 0.00
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
- risk 0.51cvss 7.8epss 0.00
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while reading secure file.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing escape code in API.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while calling the NPU driver APIs concurrently.
- risk 0.51cvss 7.8epss 0.00
Memory corruption may occur while validating ports and channels in Audio driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while handling IOCTL call from user-space to set latency level.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when IOCTL call is invoked from user-space to read board data.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
- risk 0.51cvss 7.8epss 0.00
Crafted Binder Request Causes Heap UAF in MediaServer
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing GPU page table switch.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing voice packet with arbitrary data received from ADSP.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
- risk 0.51cvss 7.8epss 0.00
Memory corruption when user provides data for FM HCI command control operations.
Page 13 of 31