Sm8150 Firmware (Qualcomm) - vulnerabilities (CVEs)

348 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-12-05. Vendor: Qualcomm.

CVEs of Sm8150 Firmware

• CVE-2023-33080 - CVSS 7.5 (high), 2023-12-05: Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
• CVE-2023-33070 - CVSS 7.1 (high), 2023-12-05: Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
• CVE-2023-33063 - CVSS 7.8 (high), 2023-12-05: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2023-33054 - CVSS 9.1 (critical), 2023-12-05: Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
• CVE-2023-33017 - CVSS 7.8 (high), 2023-12-05: Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-33024 - CVSS 7.8 (high), 2023-12-05: Memory corruption while sending SMS from AP firmware.
• CVE-2023-33022 - CVSS 8.4 (high), 2023-12-05: Memory corruption in HLOS while invoking IOCTL calls from user-space.
• CVE-2023-33018 - CVSS 7.8 (high), 2023-12-05: Memory corruption while using the UIM diag command to get the operators name.
• CVE-2023-33059 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2023-33055 - CVSS 7.8 (high), 2023-11-07: Memory Corruption in Audio while invoking callback function in driver from ADSP.
• CVE-2023-33031 - CVSS 7.8 (high), 2023-11-07: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
• CVE-2023-33027 - CVSS 7.5 (high), 2023-10-03: Transient DOS in WLAN Firmware while parsing rsn ies.
• CVE-2023-28540 - CVSS 9.1 (critical), 2023-10-03: Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
• CVE-2023-28560 - CVSS 7.8 (high), 2023-09-05: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
• CVE-2022-33275 - CVSS 8.4 (high), 2023-09-05: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
• CVE-2023-21669 - CVSS 8.2 (high), 2023-06-06: Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
• CVE-2023-21659 - CVSS 7.5 (high), 2023-06-06: Transient DOS in WLAN Firmware while processing frames with missing header fields.
• CVE-2023-21670 - CVSS 7.8 (high), 2023-06-06: Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
• CVE-2022-40536 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
• CVE-2022-40507 - CVSS 8.4 (high), 2023-06-06: Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2022-40529 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to improper access control in kernel while processing a mapping request from root process.
• CVE-2022-40523 - CVSS 7.1 (high), 2023-06-06: Information disclosure in Kernel due to indirect branch misprediction.
• CVE-2023-21628 - CVSS 8.4 (high), 2023-06-06: Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
• CVE-2022-40521 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to improper authorization in Modem
• CVE-2022-33230 - CVSS 7.8 (high), 2023-06-06: Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
• CVE-2022-33264 - CVSS 7.9 (high), 2023-06-06: Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
• CVE-2022-33227 - CVSS 7.8 (high), 2023-06-06: Memory corruption in Linux android due to double free while calling unregister provider after register call.
• CVE-2022-33263 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
• CVE-2022-33307 - CVSS 8.4 (high), 2023-06-06: Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
• CVE-2022-33226 - CVSS 7.8 (high), 2023-06-06: Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
• CVE-2022-33251 - CVSS 7.5 (high), 2023-06-06: Transient DOS due to reachable assertion in Modem because of invalid network configuration.
• CVE-2022-33267 - CVSS 7.8 (high), 2023-06-06: Memory corruption in Linux while sending DRM request.
• CVE-2022-33224 - CVSS 7.8 (high), 2023-06-06: Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
• CVE-2022-22076 - CVSS 7.1 (high), 2023-06-06: information disclosure due to cryptographic issue in Core during RPMB read request.
• CVE-2022-22060 - CVSS 7.5 (high), 2023-06-06: Assertion occurs while processing Reconfiguration message due to improper validation
• CVE-2022-40504 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
• CVE-2022-33273 - CVSS 7.3 (high), 2023-05-02: Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
• CVE-2023-21665 - CVSS 8.4 (high), 2023-05-02: Memory corruption in Graphics while importing a file.
• CVE-2022-40508 - CVSS 7.5 (high), 2023-05-02: Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
• CVE-2022-40532 - CVSS 8.4 (high), 2023-04-13: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
• CVE-2022-33298 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to use after free in Modem while modem initialization.
• CVE-2022-40503 - CVSS 8.2 (high), 2023-04-13: Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
• CVE-2022-33302 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
• CVE-2022-33296 - CVSS 7.8 (high), 2023-04-13: Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
• CVE-2022-33288 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
• CVE-2022-33289 - CVSS 6.8 (medium), 2023-04-13: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
• CVE-2022-33269 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.
• CVE-2022-33231 - CVSS 9.3 (critical), 2023-04-13: Memory corruption due to double free in core while initializing the encryption key.
• CVE-2021-30327 - CVSS 7.5 (high), 2022-06-14: Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute,…
• CVE-2020-11207 - CVSS 7.8 (high), 2020-11-12: Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2020-11206 - CVSS 7.8 (high), 2020-11-12: Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3639 - CVSS 9.8 (critical), 2020-11-12: u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon…
• CVE-2020-3632 - CVSS 7.8 (high), 2020-11-12: u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180,…
• CVE-2020-11130 - CVSS 7.8 (high), 2020-11-12: u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11175 - CVSS 7.8 (high), 2020-11-12: u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer…
• CVE-2020-11196 - CVSS 9.8 (critical), 2020-11-12: u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-11127 - CVSS 7.8 (high), 2020-11-12: u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata…
• CVE-2020-11168 - CVSS 9.8 (critical), 2020-11-12: u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto,…
• CVE-2020-11193 - CVSS 9.8 (critical), 2020-11-12: u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-11202 - CVSS 7.8 (high), 2020-11-12: Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the…
• CVE-2020-11123 - CVSS 5.5 (medium), 2020-11-12: u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen…
• CVE-2020-11132 - CVSS 7.1 (high), 2020-11-12: u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-11184 - CVSS 9.8 (critical), 2020-11-12: u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11201 - CVSS 7.8 (high), 2020-11-12: Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11121 - CVSS 7.8 (high), 2020-11-12: u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3694 - CVSS 7.8 (high), 2020-11-02: u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3704 - CVSS 7.5 (high), 2020-11-02: u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into…
• CVE-2020-3703 - CVSS 9.8 (critical), 2020-11-02: u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE…
• CVE-2020-3673 - CVSS 9.8 (critical), 2020-11-02: u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in…
• CVE-2020-11174 - CVSS 7.8 (high), 2020-11-02: u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3693 - CVSS 7.8 (high), 2020-11-02: u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3670 - CVSS 9.1 (critical), 2020-11-02: u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container'…
• CVE-2020-3690 - CVSS 7.8 (high), 2020-11-02: u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-11173 - CVSS 7 (high), 2020-11-02: u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3654 - CVSS 9.8 (critical), 2020-11-02: u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon…
• CVE-2020-3692 - CVSS 9.8 (critical), 2020-11-02: u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from…
• CVE-2020-3684 - CVSS 7.8 (high), 2020-11-02: u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation'…
• CVE-2020-3638 - CVSS 7.8 (high), 2020-11-02: u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto,…
• CVE-2020-11162 - CVSS 7.8 (high), 2020-11-02: u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon…
• CVE-2020-11125 - CVSS 7.8 (high), 2020-11-02: u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon…
• CVE-2020-11164 - CVSS 7.8 (high), 2020-11-02: u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon…
• CVE-2020-3617 - CVSS 7.1 (high), 2020-09-09: u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information…
• CVE-2020-3674 - CVSS 5.5 (medium), 2020-09-09: Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
• CVE-2020-3656 - CVSS 7.8 (high), 2020-09-09: Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto,…
• CVE-2020-3634 - CVSS 9.1 (critical), 2020-09-09: u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3679 - CVSS 5.5 (medium), 2020-09-09: u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in…
• CVE-2020-11135 - CVSS 7.5 (high), 2020-09-09: u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
• CVE-2020-11124 - CVSS 7.8 (high), 2020-09-09: u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto,…
• CVE-2020-3675 - CVSS 9.8 (critical), 2020-09-08: u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon…
• CVE-2020-3669 - CVSS 9.8 (critical), 2020-09-08: u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3668 - CVSS 9.8 (critical), 2020-09-08: u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon…
• CVE-2020-3667 - CVSS 9.8 (critical), 2020-09-08: u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute,…
• CVE-2020-3622 - CVSS 7.8 (high), 2020-09-08: u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can…
• CVE-2020-3643 - CVSS 5.5 (medium), 2020-09-08: u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3647 - CVSS 7.8 (high), 2020-09-08: u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon…
• CVE-2020-3621 - CVSS 5.5 (medium), 2020-09-08: u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption…
• CVE-2020-3629 - CVSS 7.8 (high), 2020-09-08: u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP…
• CVE-2020-3646 - CVSS 7.8 (high), 2020-09-08: u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer…
• CVE-2020-3620 - CVSS 5.5 (medium), 2020-09-08: u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and…
• CVE-2020-3624 - CVSS 7.8 (high), 2020-09-08: u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto,…