Wcn3680b Firmware

CVEs (457)

• CVE-2022-40524MedSep 5, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.7epss 0.00

  Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

• CVE-2023-28577MedAug 8, 2023
  Qualcomm

  CAM_REQ_MGR_RELEASE_BUF
  risk 0.44cvss 6.7epss 0.00

  In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel…

• CVE-2023-28575MedAug 8, 2023
  Qualcomm

  cam_get_device_priv
  risk 0.44cvss 6.7epss 0.00

  The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

• CVE-2023-21650MedAug 8, 2023
  Qualcomm

  GPS HLOS Driver
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

• CVE-2023-21649MedAug 8, 2023
  Qualcomm

  WLAN
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in WLAN while running doDriverCmd for an unspecific command.

• CVE-2023-21648MedAug 8, 2023
  Qualcomm

  RIL
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in RIL while trying to send apdu packet.

• CVE-2023-21627MedAug 8, 2023
  Qualcomm

  Trusted Execution Environment
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Trusted Execution Environment while calling service API with invalid address.

• CVE-2023-21637MedJul 4, 2023
  Qualcomm

  Linux
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Linux while calling system configuration APIs.

• CVE-2023-21635MedJul 4, 2023
  Qualcomm

  Data Network Stack & Connectivity
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

• CVE-2023-21633MedJul 4, 2023
  Qualcomm

  Linux
  risk 0.44cvss 6.7epss 0.00

  Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

• CVE-2023-21629MedJul 4, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.8epss 0.00

  Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

• CVE-2022-33267MedJun 6, 2023
  Qualcomm

  Linux
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Linux while sending DRM request.

• CVE-2022-33263MedJun 6, 2023
  Qualcomm

  Core
  risk 0.44cvss 6.7epss 0.00

  Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

• CVE-2022-33230MedJun 6, 2023
  Qualcomm

  FM Host
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

• CVE-2022-33227MedJun 6, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in Linux android due to double free while calling unregister provider after register call.

• CVE-2022-33226MedJun 6, 2023
  Qualcomm

  Core
  risk 0.44cvss 6.7epss 0.00

  Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

• CVE-2022-33224MedJun 6, 2023
  Qualcomm

  Core
  risk 0.44cvss 6.7epss 0.00

  Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

• CVE-2022-33302MedApr 13, 2023
  Qualcomm

  User Identity Module
  risk 0.44cvss 6.8epss 0.00

  Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

• CVE-2022-33298MedApr 13, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.7epss 0.00

  Memory corruption due to use after free in Modem while modem initialization.

• CVE-2022-33289MedApr 13, 2023
  Qualcomm

  Modem
  risk 0.44cvss 6.8epss 0.00

  Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.