cve.bz

qualcomm sa6155p firmware vulnerabilities, newest first, page 4

Filter
  1. 7.8CVE-2023-28575EPSS 0.1%

    The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

  2. 7.5CVE-2023-28555EPSS 0.4%

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  3. 7.1CVE-2023-21652EPSS 0.1%

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  4. 7.8CVE-2023-21650EPSS 0.1%

    Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

  5. 7.8CVE-2023-21649EPSS 0.1%

    Memory corruption in WLAN while running doDriverCmd for an unspecific command.

  6. 7.8CVE-2023-21648EPSS 0.1%

    Memory corruption in RIL while trying to send apdu packet.

  7. 6.5CVE-2023-21647EPSS 0.4%

    Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

  8. 7.8CVE-2023-21643EPSS 0.2%

    Memory corruption due to untrusted pointer dereference in automotive during system call.

  9. 7.8CVE-2023-21627EPSS 0.1%

    Memory corruption in Trusted Execution Environment while calling service API with invalid address.

  10. 7.8CVE-2023-21672EPSS 0.1%

    Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

  11. 7.8CVE-2023-21641EPSS 0.1%

    An app with non-privileged access can change global system brightness and cause undesired system behavior.

  12. 7.8CVE-2023-21639EPSS 0.1%

    Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

  13. 7.8CVE-2023-21638EPSS 0.1%

    Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

  14. 7.8CVE-2023-21637EPSS 0.1%

    Memory corruption in Linux while calling system configuration APIs.

  15. 7.8CVE-2023-21635EPSS 0.1%

    Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

  16. 7.8CVE-2023-21633EPSS 0.1%

    Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

  17. 5.5CVE-2023-21624EPSS 0.1%

    Information disclosure in DSP Services while loading dynamic module.

  18. 7.8CVE-2023-21657EPSS 0.1%

    Memoru corruption in Audio when ADSP sends input during record use case.

  19. 7.8CVE-2023-21656EPSS 0.1%

    Memory corruption in WLAN HOST while receiving an WMI event from firmware.

  20. 7.8CVE-2023-21632EPSS 0.1%

    Memory corruption in Automotive GPU while querying a gsl memory node.

  21. 7.8CVE-2022-40522EPSS 0.1%

    Memory corruption in Linux Networking due to double free while handling a hyp-assign.

  22. 7.8CVE-2022-33307EPSS 0.1%

    Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

  23. 5.5CVE-2022-33303EPSS 0.1%

    Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.

  24. 7.8CVE-2022-33267EPSS 0.1%

    Memory corruption in Linux while sending DRM request.

  25. 7.8CVE-2022-33263EPSS 0.1%

    Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

  26. 7.8CVE-2022-33240EPSS 0.1%

    Memory corruption in Audio due to incorrect type cast during audio use-cases.

  27. 7.8CVE-2022-33230EPSS 0.1%

    Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

  28. 7.8CVE-2022-33227EPSS 0.1%

    Memory corruption in Linux android due to double free while calling unregister provider after register call.

  29. 7.8CVE-2022-33224EPSS 0.1%

    Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

  30. 5.5CVE-2022-33273EPSS 0.1%

    Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

  31. 7.8CVE-2023-21642EPSS 0.1%

    Memory corruption in HAB Memory management due to broad system privileges via physical address.

  32. 7.8CVE-2022-25713EPSS 0.1%

    Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

  33. 7.8CVE-2023-21630EPSS 0.1%

    Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

  34. 7.8CVE-2022-33301EPSS 0.1%

    Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.

  35. 7.8CVE-2022-33298EPSS 0.1%

    Memory corruption due to use after free in Modem while modem initialization.

  36. 8.8CVE-2022-33288EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

  37. 7.8CVE-2022-33282EPSS 0.1%

    Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

  38. 7.8CVE-2022-33269EPSS 0.1%

    Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

  39. 7.8CVE-2022-40539EPSS 0.1%

    Memory corruption in Automotive Android OS due to improper validation of array index.

  40. 7.8CVE-2022-33278EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

  41. 7.8CVE-2022-33260EPSS 0.1%

    Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

  42. 7.8CVE-2022-33245EPSS 0.1%

    Memory corruption in WLAN due to use after free

  43. 8.8CVE-2022-33280EPSS 0.3%

    Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

  44. 7.8CVE-2022-33246EPSS 0.1%

    Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

  45. 7.8CVE-2022-33232EPSS 0.1%

    Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

  46. 5.5CVE-2022-33216EPSS 0.1%

    Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

  47. 7.8CVE-2022-33300EPSS 0.1%

    Memory corruption in Automotive Android OS due to improper input validation.

  48. 7.8CVE-2022-33274EPSS 0.1%

    Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.

  49. 6.5CVE-2022-33255EPSS 0.4%

    Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

  50. 7.8CVE-2022-33219EPSS 0.1%

    Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.