Sd205 Firmware (Qualcomm) - vulnerabilities (CVEs)

174 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-11-22. Vendor: Qualcomm.

CVEs of Sd205 Firmware

CVE-2021-30299 - CVSS 6.7 (medium), 2024-11-22: Possible out of bound access in audio module due to lack of validation of user provided input.
CVE-2023-28537 - CVSS 8.4 (high), 2023-08-08: Memory corruption while allocating memory in COmxApeDec module in Audio.
CVE-2023-21625 - CVSS 8.2 (high), 2023-08-08: Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2023-22666 - CVSS 8.4 (high), 2023-08-08: Memory Corruption in Audio while playing amrwbplus clips with modified content.
CVE-2023-21626 - CVSS 7.1 (high), 2023-08-08: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVE-2022-40510 - CVSS 9.8 (critical), 2023-08-08: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVE-2022-33231 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to double free in core while initializing the encryption key.
CVE-2022-40537 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
CVE-2022-40515 - CVSS 9.8 (critical), 2023-03-10: Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.
CVE-2022-25705 - CVSS 7.8 (high), 2023-03-10: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
CVE-2022-25694 - CVSS 8.4 (high), 2023-03-10: Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
CVE-2022-22075 - CVSS 6.2 (medium), 2023-03-10: Information Disclosure in Graphics during GPU context switch.
CVE-2022-33213 - CVSS 8.8 (high), 2023-03-10: Memory corruption in modem due to buffer overflow while processing a PPP packet
CVE-2022-33243 - CVSS 8.4 (high), 2023-02-12: Memory corruption due to improper access control in Qualcomm IPC.
CVE-2022-33233 - CVSS 7.8 (high), 2023-02-12: Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-33248 - CVSS 7.8 (high), 2023-02-12: Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
CVE-2022-33225 - CVSS 7.8 (high), 2023-02-12: Memory corruption due to use after free in trusted application environment.
CVE-2022-33266 - CVSS 7.8 (high), 2023-01-09: Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.
CVE-2022-33255 - CVSS 8.2 (high), 2023-01-09: Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
CVE-2022-22088 - CVSS 9.8 (critical), 2023-01-09: Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
CVE-2022-25721 - CVSS 7.8 (high), 2023-01-09: Memory corruption in video driver due to type confusion error during video playback
CVE-2022-25717 - CVSS 7.8 (high), 2023-01-09: Memory corruption in display due to double free while allocating frame buffer memory
CVE-2022-25715 - CVSS 7.8 (high), 2023-01-09: Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
CVE-2022-25722 - CVSS 6 (medium), 2023-01-09: Information exposure in DSP services due to improper handling of freeing memory
CVE-2022-33268 - CVSS 8.2 (high), 2022-12-13: Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25711 - CVSS 7.8 (high), 2022-12-13: Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
CVE-2022-25682 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25702 - CVSS 7.5 (high), 2022-12-13: Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial…
CVE-2022-25695 - CVSS 8.4 (high), 2022-12-13: Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25712 - CVSS 7.8 (high), 2022-12-13: Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-25685 - CVSS 7.5 (high), 2022-12-13: Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
CVE-2022-25677 - CVSS 7.8 (high), 2022-12-13: Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-25743 - CVSS 8.4 (high), 2022-11-15: Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25724 - CVSS 8.4 (high), 2022-11-15: Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25664 - CVSS 6.2 (medium), 2022-10-19: Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-25718 - CVSS 9.8 (critical), 2022-10-19: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25687 - CVSS 9.8 (critical), 2022-10-19: memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2022-25720 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-25666 - CVSS 6.7 (medium), 2022-10-19: Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25719 - CVSS 9.1 (critical), 2022-10-19: Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2021-35112 - CVSS 8.4 (high), 2022-06-14: A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon…
CVE-2021-35104 - CVSS 9.8 (critical), 2022-06-14: Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-35100 - CVSS 7.5 (high), 2022-06-14: Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30344 - CVSS 7.5 (high), 2022-06-14: Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30334 - CVSS 8.4 (high), 2022-06-14: Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30342 - CVSS 9.1 (critical), 2022-06-14: Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto,…
CVE-2021-30341 - CVSS 9.8 (critical), 2022-06-14: Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-35105 - CVSS 8.4 (high), 2022-04-01: Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30333 - CVSS 7.8 (high), 2022-04-01: Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30318 - CVSS 8.4 (high), 2022-02-11: Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30325 - CVSS 6.7 (medium), 2022-02-11: Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30324 - CVSS 6.7 (medium), 2022-02-11: Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto,…
CVE-2021-30323 - CVSS 7.8 (high), 2022-02-11: Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
CVE-2021-30314 - CVSS 6.2 (medium), 2022-01-13: Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30313 - CVSS 6.7 (medium), 2022-01-13: Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30353 - CVSS 7.5 (high), 2022-01-13: Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30300 - CVSS 7.5 (high), 2022-01-13: Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS…
CVE-2021-30330 - CVSS 7.5 (high), 2022-01-13: Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2021-30351 - CVSS 9.8 (critical), 2022-01-03: An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon…
CVE-2021-30272 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30293 - CVSS 7.5 (high), 2022-01-03: Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2021-30337 - CVSS 8.4 (high), 2022-01-03: Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30271 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30289 - CVSS 7.8 (high), 2022-01-03: Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30335 - CVSS 8.4 (high), 2022-01-03: Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon…
CVE-2021-30273 - CVSS 7.5 (high), 2022-01-03: Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30298 - CVSS 7.8 (high), 2022-01-03: Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon…
CVE-2021-30268 - CVSS 7.8 (high), 2022-01-03: Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30262 - CVSS 8.4 (high), 2022-01-03: Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon…
CVE-2021-30270 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon…
CVE-2021-30255 - CVSS 7.8 (high), 2021-11-12: Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30266 - CVSS 6.7 (medium), 2021-11-12: Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-1973 - CVSS 7.8 (high), 2021-11-12: A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2021-30254 - CVSS 7.8 (high), 2021-11-12: Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30265 - CVSS 6.7 (medium), 2021-11-12: Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in…
CVE-2021-1924 - CVSS 9 (critical), 2021-11-12: Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1981 - CVSS 9.1 (critical), 2021-11-12: Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30264 - CVSS 6.7 (medium), 2021-11-12: Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2021-30284 - CVSS 9.1 (critical), 2021-11-12: Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-1975 - CVSS 9.8 (critical), 2021-11-12: Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1985 - CVSS 8.4 (high), 2021-10-20: Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30292 - CVSS 8.4 (high), 2021-10-20: Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1984 - CVSS 8.4 (high), 2021-10-20: Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30291 - CVSS 8.4 (high), 2021-10-20: Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1983 - CVSS 8.4 (high), 2021-10-20: Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30258 - CVSS 8.4 (high), 2021-10-20: Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30297 - CVSS 8.4 (high), 2021-10-20: Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-1967 - CVSS 5.3 (medium), 2021-10-20: Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon…
CVE-2021-1959 - CVSS 7.8 (high), 2021-10-20: Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
CVE-2021-1936 - CVSS 7.5 (high), 2021-10-20: Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30261 - CVSS 8.4 (high), 2021-09-17: Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto,…
CVE-2021-1976 - CVSS 9.8 (critical), 2021-09-17: A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1939 - CVSS 8.4 (high), 2021-09-17: Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30295 - CVSS 8.4 (high), 2021-09-09: Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-1974 - CVSS 7.5 (high), 2021-09-09: Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1961 - CVSS 6.7 (medium), 2021-09-09: Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1963 - CVSS 6.7 (medium), 2021-09-09: Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1962 - CVSS 6.7 (medium), 2021-09-09: Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size…
CVE-2021-1946 - CVSS 9.8 (critical), 2021-09-09: Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1935 - CVSS 7.1 (high), 2021-09-09: Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon…