Qca6430 Firmware

CVEs (585)

• CVE-2023-33023HigApr 1, 2024
  Qualcomm

  Fastconnect 6900 Firmware
  risk 0.55cvss 8.4epss 0.00

  Memory corruption while processing finish_sign command to pass a rsp buffer.

• CVE-2023-28547HigApr 1, 2024
  Qualcomm

  SPS Application
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in SPS Application while requesting for public key in sorter TA.

• CVE-2023-43541HigMar 4, 2024
  Qualcomm

  Gfx engine
  risk 0.55cvss 8.4epss 0.00

  Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.

• CVE-2023-43540HigMar 4, 2024
  Qualcomm

  FM HCI
  risk 0.55cvss 8.4epss 0.00

  Memory corruption while processing the IOCTL FM HCI WRITE request.

• CVE-2023-33066HigMar 4, 2024
  Qualcomm

  Audio
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in Audio while processing RT proxy port register driver.

• CVE-2023-33114HigJan 2, 2024
  Qualcomm

  NPU
  risk 0.55cvss 8.4epss 0.00

  Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

• CVE-2023-33033HigJan 2, 2024
  Qualcomm

  Audio
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in Audio during playback with speaker protection.

• CVE-2023-33092HigDec 5, 2023
  Qualcomm

  Bluetooth
  risk 0.55cvss 8.4epss 0.00

  Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

• CVE-2023-33088HigDec 5, 2023
  Qualcomm

  vdev
  risk 0.55cvss 8.4epss 0.00

  Memory corruption when processing cmd parameters while parsing vdev.

• CVE-2023-33022HigDec 5, 2023
  Qualcomm

  HLOS
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in HLOS while invoking IOCTL calls from user-space.

• CVE-2023-24852HigNov 7, 2023
  Qualcomm

  Core
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption in Core due to secure memory access by user while loading modem image.

• CVE-2023-33021HigSep 5, 2023
  Qualcomm

  Graphics
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in Graphics while processing user packets for command submission.

• CVE-2023-28538HigSep 5, 2023
  Qualcomm

  WIN Product
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

• CVE-2022-33275HigSep 5, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

• CVE-2023-28537HigAug 8, 2023
  Qualcomm

  Audio
  risk 0.55cvss 8.4epss 0.00

  Memory corruption while allocating memory in COmxApeDec module in Audio.

• CVE-2023-22666HigAug 8, 2023
  Qualcomm

  Audio
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption in Audio while playing amrwbplus clips with modified content.

• CVE-2023-22667HigJul 4, 2023
  Qualcomm

  Audio
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption in Audio while allocating the ion buffer during the music playback.

• CVE-2023-21628HigJun 6, 2023
  Qualcomm

  WLAN HAL
  risk 0.55cvss 8.4epss 0.00

  Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

• CVE-2022-40507HigJun 6, 2023
  Qualcomm

  Core
  risk 0.55cvss 8.4epss 0.01

  Memory corruption due to double free in Core while mapping HLOS address to the list.

• CVE-2022-33307HigJun 6, 2023
  Qualcomm

  Automotive
  risk 0.55cvss 8.4epss 0.00

  Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.