Qrb5165n Firmware

CVEs (330)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-35077	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Feb 11, 2022	Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35068	Qualcomm Snapdragon	Hig	0.55	8.4	0.01	Feb 11, 2022	Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music,…
CVE-2021-30318	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Feb 11, 2022	Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30337	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30335	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30282	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…
CVE-2021-30274	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…
CVE-2021-30262	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Jan 3, 2022	Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2024-38408	Qualcomm Controller	Hig	0.53	8.2	0.00	Nov 4, 2024	Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
CVE-2024-33073	Qualcomm ML IE	Hig	0.53	8.2	0.00	Oct 7, 2024	Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2023-28585	Qualcomm TEE Kernel	Hig	0.53	8.2	0.00	Dec 5, 2023	Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28545	Qualcomm TZ Secure OS	Hig	0.53	8.2	0.00	Nov 7, 2023	Memory corruption in TZ Secure OS while loading an app ELF.
CVE-2023-21669	Qualcomm WLAN Host	Hig	0.53	8.2	0.00	Jun 6, 2023	Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2022-40503	Qualcomm Bluetooth HOST	Hig	0.53	8.2	0.00	Apr 13, 2023	Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33271	Qualcomm WLAN	Hig	0.53	8.2	0.00	Feb 12, 2023	Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33284	Qualcomm WLAN	Hig	0.53	8.2	0.00	Jan 9, 2023	Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
CVE-2022-33283	Qualcomm WLAN	Hig	0.53	8.2	0.00	Jan 9, 2023	Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
CVE-2022-33255	Qualcomm Bluetooth HOST	Hig	0.53	8.2	0.00	Jan 9, 2023	Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
CVE-2022-33252	Qualcomm WLAN	Hig	0.53	8.2	0.00	Jan 9, 2023	Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
CVE-2022-25746	Qualcomm kernel	Hig	0.53	8.1	0.00	Jan 9, 2023	Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

CVE-2021-35077HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35068HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.01
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music,…
CVE-2021-30318HigFeb 11, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30337HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2021-30335HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2021-30282HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…
CVE-2021-30274HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…
CVE-2021-30262HigJan 3, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…
CVE-2024-38408HigNov 4, 2024
Qualcomm
Controller
risk 0.53cvss 8.2epss 0.00
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
CVE-2024-33073HigOct 7, 2024
Qualcomm
ML IE
risk 0.53cvss 8.2epss 0.00
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
CVE-2023-28585HigDec 5, 2023
Qualcomm
TEE Kernel
risk 0.53cvss 8.2epss 0.00
Memory corruption while loading an ELF segment in TEE Kernel.
CVE-2023-28545HigNov 7, 2023
Qualcomm
TZ Secure OS
risk 0.53cvss 8.2epss 0.00
Memory corruption in TZ Secure OS while loading an app ELF.
CVE-2023-21669HigJun 6, 2023
Qualcomm
WLAN Host
risk 0.53cvss 8.2epss 0.00
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2022-40503HigApr 13, 2023
Qualcomm
Bluetooth HOST
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
CVE-2022-33271HigFeb 12, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
CVE-2022-33284HigJan 9, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
CVE-2022-33283HigJan 9, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
CVE-2022-33255HigJan 9, 2023
Qualcomm
Bluetooth HOST
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
CVE-2022-33252HigJan 9, 2023
Qualcomm
WLAN
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
CVE-2022-25746HigJan 9, 2023
Qualcomm
kernel
risk 0.53cvss 8.1epss 0.00
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

Page 6 of 17