cve.bz

qualcomm fastconnect 7800 firmware vulnerabilities, newest first, page 12

Filter
  1. 7.8CVE-2023-43514EPSS 0.1%

    Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

  2. 7.5CVE-2023-43511EPSS 0.3%

    Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.

  3. 7.8CVE-2023-33120EPSS 0.1%

    Memory corruption in Audio when memory map command is executed consecutively in ADSP.

  4. 7.8CVE-2023-33118EPSS 0.1%

    Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.

  5. 7.8CVE-2023-33117EPSS 0.1%

    Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

  6. 7.5CVE-2023-33116EPSS 0.3%

    Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

  7. 7.8CVE-2023-33113EPSS 0.1%

    Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.

  8. 7.5CVE-2023-33112EPSS 0.3%

    Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.

  9. 7.5CVE-2023-33109EPSS 0.3%

    Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

  10. 7.8CVE-2023-33094EPSS 0.1%

    Memory corruption while running VK synchronization with KASAN enabled.

  11. 7.8CVE-2023-33085EPSS 0.1%

    Memory corruption in wearables while processing data from AON.

  12. 7.5CVE-2023-33062EPSS 0.3%

    Transient DOS in WLAN Firmware while parsing a BTM request.

  13. 7.5CVE-2023-33040EPSS 0.3%

    Transient DOS in Data Modem during DTLS handshake.

  14. 7.8CVE-2023-33038EPSS 0.1%

    Memory corruption while receiving a message in Bus Socket Transport Server.

  15. 5.5CVE-2023-33037EPSS 0.09%

    Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.

  16. 5.5CVE-2023-33036EPSS 0.1%

    Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

  17. 7.8CVE-2023-33033EPSS 0.1%

    Memory corruption in Audio during playback with speaker protection.

  18. 7.8CVE-2023-33030EPSS 0.1%

    Memory corruption in HLOS while running playready use-case.

  19. 6.8CVE-2023-33014EPSS 0.2%

    Information disclosure in Core services while processing a Diag command.

  20. 7.8CVE-2023-33107KEVEPSS 0.7%

    Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

  21. 7.8CVE-2023-33106KEVEPSS 0.8%

    Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

  22. 7.5CVE-2023-33098EPSS 0.5%

    Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

  23. 7.5CVE-2023-33097EPSS 0.5%

    Transient DOS in WLAN Firmware while processing a FTMR frame.

  24. 7.8CVE-2023-33092EPSS 0.2%

    Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

  25. 7.5CVE-2023-33089EPSS 0.5%

    Transient DOS when processing a NULL buffer while parsing WLAN vdev.

  26. 7.8CVE-2023-33088EPSS 0.2%

    Memory corruption when processing cmd parameters while parsing vdev.

  27. 7.5CVE-2023-28588EPSS 0.5%

    Transient DOS in Bluetooth Host while rfc slot allocation.

  28. 7.8CVE-2023-28587EPSS 0.2%

    Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.

  29. 6.5CVE-2023-28586EPSS 0.1%

    Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE.

  30. 8.8CVE-2023-28585EPSS 0.1%

    Memory corruption while loading an ELF segment in TEE Kernel.

  31. 7.8CVE-2023-28580EPSS 0.2%

    Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

  32. 7.8CVE-2023-28579EPSS 0.2%

    Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

  33. 7.8CVE-2023-28551EPSS 0.1%

    Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

  34. 7.8CVE-2023-28550EPSS 0.1%

    Memory corruption in MPP performance while accessing DSM watermark using external memory address.

  35. 7.8CVE-2023-28546EPSS 0.1%

    Memory Corruption in SPS Application while exporting public key in sorter TA.

  36. 7.8CVE-2023-22668EPSS 0.1%

    Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

  37. 8.8CVE-2023-28572EPSS 0.4%

    Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

  38. 7.8CVE-2023-28570EPSS 0.1%

    Memory corruption while processing audio effects.

  39. 7.8CVE-2023-28556EPSS 0.1%

    Cryptographic issue in HLOS during key management.

  40. 5.5CVE-2023-28554EPSS 0.1%

    Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

  41. 5.5CVE-2023-28553EPSS 0.1%

    Information Disclosure in WLAN Host when processing WMI event command.

  42. 7.8CVE-2023-28545EPSS 0.1%

    Memory corruption in TZ Secure OS while loading an app ELF.

  43. 7.8CVE-2023-24852EPSS 0.1%

    Memory Corruption in Core due to secure memory access by user while loading modem image.

  44. 9.8CVE-2023-22388EPSS 0.4%

    Memory Corruption in Multi-mode Call Processor while processing bit mask API.

  45. 7.8CVE-2023-28539EPSS 0.1%

    Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

  46. 9.8CVE-2023-24855EPSS 0.5%

    Memory corruption in Modem while processing security related configuration before AS Security Exchange.

  47. 7.8CVE-2023-24853EPSS 0.1%

    Memory Corruption in HLOS while registering for key provisioning notify.

  48. 7.8CVE-2023-24850EPSS 0.1%

    Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

  49. 7.5CVE-2023-24849EPSS 0.4%

    Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

  50. 7.5CVE-2023-24848EPSS 0.4%

    Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.