cve.bz

qualcomm sa8155p firmware vulnerabilities, newest first, page 3

Filter
  1. 9.8CVE-2023-43548EPSS 0.3%

    Memory corruption while parsing qcp clip with invalid chunk data size.

  2. 5.5CVE-2023-33090EPSS 0.10%

    Transient DOS while processing channel information for speaker protection v2 module in ADSP.

  3. 9.8CVE-2023-43534EPSS 0.3%

    Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

  4. 9.8CVE-2023-43520EPSS 0.3%

    Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

  5. 9.8CVE-2023-43519EPSS 0.3%

    Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

  6. 9.8CVE-2023-43518EPSS 0.3%

    Memory corruption in video while parsing invalid mp2 clip.

  7. 7.8CVE-2023-33077EPSS 0.1%

    Memory corruption in HLOS while converting from authorization token to HIDL vector.

  8. 7.8CVE-2023-33069EPSS 0.1%

    Memory corruption in Audio while processing the calibration data returned from ACDB loader.

  9. 7.8CVE-2023-33068EPSS 0.1%

    Memory corruption in Audio while processing IIR config data from AFE calibration block.

  10. 7.8CVE-2023-33067EPSS 0.1%

    Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

  11. 7.1CVE-2023-33065EPSS 0.1%

    Information disclosure in Audio while accessing AVCS services from ADSP payload.

  12. 5.5CVE-2023-33064EPSS 0.1%

    Transient DOS in Audio when invoking callback function of ASM driver.

  13. 7.8CVE-2023-43514EPSS 0.1%

    Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

  14. 7.8CVE-2023-33114EPSS 0.1%

    Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

  15. 7.8CVE-2023-33108EPSS 0.1%

    Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

  16. 5.5CVE-2023-33037EPSS 0.09%

    Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.

  17. 5.5CVE-2023-33036EPSS 0.1%

    Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

  18. 7.8CVE-2023-28583EPSS 0.1%

    Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

  19. 7.8CVE-2023-33071EPSS 0.1%

    Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.

  20. 5.5CVE-2023-33070EPSS 0.1%

    Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

  21. 7.8CVE-2023-33024EPSS 0.2%

    Memory corruption while sending SMS from AP firmware.

  22. 7.8CVE-2023-28580EPSS 0.2%

    Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

  23. 7.8CVE-2023-28579EPSS 0.2%

    Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

  24. 7.8CVE-2023-22383EPSS 0.1%

    Memory Corruption in camera while installing a fd for a particular DMA buffer.

  25. 7.8CVE-2023-21634EPSS 0.1%

    Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

  26. 7.8CVE-2023-33074EPSS 0.1%

    Memory corruption in Audio when SSR event is triggered after music playback is stopped.

  27. 8.8CVE-2023-28572EPSS 0.4%

    Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

  28. 7.8CVE-2023-28570EPSS 0.1%

    Memory corruption while processing audio effects.

  29. 5.5CVE-2023-28566EPSS 0.1%

    Information disclosure in WLAN HAL while handling the WMI state info command.

  30. 7.8CVE-2023-33039EPSS 0.1%

    Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

  31. 7.8CVE-2023-33034EPSS 0.1%

    Memory corruption while parsing the ADSP response command.

  32. 5.5CVE-2023-28571EPSS 0.1%

    Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

  33. 7.8CVE-2023-22384EPSS 0.1%

    Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

  34. 8.2CVE-2023-22382EPSS 0.1%

    Weak configuration in Automotive while VM is processing a listener request from TEE.

  35. 7.5CVE-2023-28584EPSS 0.4%

    Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

  36. 6.5CVE-2023-21667EPSS 0.4%

    Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

  37. 7.8CVE-2023-21663EPSS 0.1%

    Memory Corruption while accessing metadata in Display.

  38. 7.8CVE-2023-21655EPSS 0.1%

    Memory corruption in Audio while validating and mapping metadata.

  39. 7.8CVE-2023-21654EPSS 0.1%

    Memory corruption in Audio during playback session with audio effects enabled.

  40. 7.8CVE-2023-21644EPSS 0.1%

    Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.

  41. 7.8CVE-2023-21636EPSS 0.1%

    Memory Corruption due to improper validation of array index in Linux while updating adn record.

  42. 7.8CVE-2022-40524EPSS 0.1%

    Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

  43. 5.5CVE-2022-33220EPSS 0.1%

    Information disclosure in Automotive multimedia due to buffer over-read.

  44. 7.8CVE-2023-28575EPSS 0.1%

    The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

  45. 7.5CVE-2023-28555EPSS 0.4%

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  46. 7.1CVE-2023-21652EPSS 0.1%

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  47. 7.8CVE-2023-21650EPSS 0.1%

    Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

  48. 7.8CVE-2023-21649EPSS 0.1%

    Memory corruption in WLAN while running doDriverCmd for an unspecific command.

  49. 7.8CVE-2023-21648EPSS 0.1%

    Memory corruption in RIL while trying to send apdu packet.

  50. 6.5CVE-2023-21647EPSS 0.4%

    Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.