cve.bz

qualcomm ar8035 firmware vulnerabilities, newest first, page 9

Filter
  1. 7.5CVE-2022-40504EPSS 0.4%

    Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

  2. 5.5CVE-2022-33273EPSS 0.1%

    Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

  3. 7.8CVE-2023-21665EPSS 0.2%

    Memory corruption in Graphics while importing a file.

  4. 7.5CVE-2022-40508EPSS 0.4%

    Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

  5. 7.5CVE-2022-34144EPSS 0.4%

    Transient DOS due to reachable assertion in Modem during OSI decode scheduling.

  6. 7.5CVE-2022-33305EPSS 0.4%

    Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

  7. 7.8CVE-2022-25713EPSS 0.1%

    Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

  8. 7.8CVE-2022-40532EPSS 0.1%

    Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

  9. 7.8CVE-2022-33302EPSS 0.1%

    Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

  10. 7.8CVE-2022-33296EPSS 0.1%

    Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

  11. 6.8CVE-2022-33289EPSS 0.2%

    Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

  12. 8.8CVE-2022-33288EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

  13. 5.9CVE-2022-33270EPSS 0.3%

    Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.

  14. 7.8CVE-2022-33269EPSS 0.1%

    Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

  15. 7.8CVE-2022-33231EPSS 0.08%

    Memory corruption due to double free in core while initializing the encryption key.

  16. 7.8CVE-2022-40531EPSS 0.1%

    Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

  17. 7.8CVE-2022-40530EPSS 0.1%

    Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

  18. 7.5CVE-2022-40527EPSS 0.4%

    Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.

  19. 7.8CVE-2022-33278EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

  20. 7.5CVE-2022-33272EPSS 0.4%

    Transient DOS in modem due to reachable assertion.

  21. 7.0CVE-2022-33257EPSS 0.09%

    Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

  22. 9.8CVE-2022-33256EPSS 0.5%

    Memory corruption due to improper validation of array index in Multi-mode call processor.

  23. 7.5CVE-2022-33254EPSS 0.4%

    Transient DOS due to reachable assertion in Modem while processing SIB1 Message.

  24. 7.5CVE-2022-33250EPSS 0.4%

    Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.

  25. 7.5CVE-2022-33244EPSS 0.4%

    Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout

  26. 7.8CVE-2022-33242EPSS 0.1%

    Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

  27. 8.8CVE-2022-33213EPSS 0.4%

    Memory corruption in modem due to buffer overflow while processing a PPP packet

  28. 7.8CVE-2022-25709EPSS 0.1%

    Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

  29. 7.8CVE-2022-25705EPSS 0.1%

    Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

  30. 7.8CVE-2022-25694EPSS 0.1%

    Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

  31. 5.5CVE-2022-22075EPSS 0.1%

    Information Disclosure in Graphics during GPU context switch.

  32. 9.8CVE-2022-40514EPSS 0.5%

    Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

  33. 7.5CVE-2022-40512EPSS 0.4%

    Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

  34. 7.5CVE-2022-33306EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

  35. 8.8CVE-2022-33280EPSS 0.3%

    Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

  36. 7.8CVE-2022-33277EPSS 0.1%

    Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

  37. 7.5CVE-2022-33271EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

  38. 7.8CVE-2022-33248EPSS 0.1%

    Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

  39. 7.8CVE-2022-33233EPSS 0.1%

    Memory corruption due to configuration weakness in modem wile sending command to write protected files.

  40. 7.8CVE-2022-33232EPSS 0.1%

    Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

  41. 7.8CVE-2022-40520EPSS 0.7%

    Memory corruption due to stack-based buffer overflow in Core

  42. 5.5CVE-2022-40519EPSS 0.1%

    Information disclosure due to buffer overread in Core

  43. 5.5CVE-2022-40518EPSS 0.1%

    Information disclosure due to buffer overread in Core

  44. 7.8CVE-2022-40517EPSS 0.1%

    Memory corruption in core due to stack-based buffer overflow

  45. 7.8CVE-2022-40516EPSS 0.9%

    Memory corruption in Core due to stack-based buffer overflow.

  46. 6.5CVE-2022-33286EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

  47. 6.5CVE-2022-33285EPSS 0.4%

    Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

  48. 6.5CVE-2022-33284EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

  49. 6.5CVE-2022-33283EPSS 0.4%

    Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

  50. 7.8CVE-2022-33276EPSS 0.1%

    Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.