cve.bz

qualcomm sa8295p firmware vulnerabilities, newest first, page 3

Filter
  1. 7.8CVE-2023-43517EPSS 0.10%

    Memory corruption in Automotive Multimedia due to improper access control in HAB.

  2. 7.8CVE-2023-33077EPSS 0.1%

    Memory corruption in HLOS while converting from authorization token to HIDL vector.

  3. 7.1CVE-2023-33065EPSS 0.1%

    Information disclosure in Audio while accessing AVCS services from ADSP payload.

  4. 5.5CVE-2023-33064EPSS 0.1%

    Transient DOS in Audio when invoking callback function of ASM driver.

  5. 7.0CVE-2023-33046EPSS 0.08%

    Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

  6. 7.8CVE-2023-43514EPSS 0.1%

    Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

  7. 7.8CVE-2023-33114EPSS 0.1%

    Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

  8. 7.8CVE-2023-33108EPSS 0.1%

    Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

  9. 5.5CVE-2023-33037EPSS 0.09%

    Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.

  10. 5.5CVE-2023-33036EPSS 0.1%

    Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.

  11. 5.5CVE-2023-33070EPSS 0.1%

    Transient DOS in Automotive OS due to improper authentication to the secure IO calls.

  12. 7.8CVE-2023-33024EPSS 0.2%

    Memory corruption while sending SMS from AP firmware.

  13. 7.8CVE-2023-28580EPSS 0.2%

    Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

  14. 7.8CVE-2023-28579EPSS 0.2%

    Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

  15. 7.8CVE-2023-22383EPSS 0.1%

    Memory Corruption in camera while installing a fd for a particular DMA buffer.

  16. 7.8CVE-2023-33074EPSS 0.1%

    Memory corruption in Audio when SSR event is triggered after music playback is stopped.

  17. 8.8CVE-2023-28572EPSS 0.4%

    Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

  18. 7.8CVE-2023-28570EPSS 0.1%

    Memory corruption while processing audio effects.

  19. 7.8CVE-2023-33039EPSS 0.1%

    Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

  20. 7.8CVE-2023-33034EPSS 0.1%

    Memory corruption while parsing the ADSP response command.

  21. 5.5CVE-2023-28571EPSS 0.1%

    Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

  22. 8.2CVE-2023-22382EPSS 0.1%

    Weak configuration in Automotive while VM is processing a listener request from TEE.

  23. 7.5CVE-2023-28584EPSS 0.4%

    Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).

  24. 7.8CVE-2023-21654EPSS 0.1%

    Memory corruption in Audio during playback session with audio effects enabled.

  25. 5.5CVE-2022-33220EPSS 0.1%

    Information disclosure in Automotive multimedia due to buffer over-read.

  26. 7.8CVE-2023-28575EPSS 0.1%

    The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

  27. 7.5CVE-2023-28555EPSS 0.4%

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  28. 7.1CVE-2023-21652EPSS 0.1%

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  29. 7.8CVE-2023-21650EPSS 0.1%

    Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

  30. 7.8CVE-2023-21643EPSS 0.2%

    Memory corruption due to untrusted pointer dereference in automotive during system call.

  31. 7.8CVE-2023-21672EPSS 0.1%

    Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

  32. 7.8CVE-2023-21633EPSS 0.1%

    Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

  33. 7.8CVE-2023-21632EPSS 0.1%

    Memory corruption in Automotive GPU while querying a gsl memory node.

  34. 5.5CVE-2022-40533EPSS 0.1%

    Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.

  35. 7.8CVE-2022-33307EPSS 0.1%

    Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

  36. 7.8CVE-2022-33227EPSS 0.1%

    Memory corruption in Linux android due to double free while calling unregister provider after register call.

  37. 5.5CVE-2022-33273EPSS 0.1%

    Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

  38. 7.8CVE-2023-21642EPSS 0.1%

    Memory corruption in HAB Memory management due to broad system privileges via physical address.

  39. 7.8CVE-2022-25713EPSS 0.1%

    Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

  40. 8.8CVE-2022-33288EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

  41. 7.8CVE-2022-33282EPSS 0.1%

    Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

  42. 7.8CVE-2022-33269EPSS 0.1%

    Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

  43. 7.8CVE-2022-40539EPSS 0.1%

    Memory corruption in Automotive Android OS due to improper validation of array index.

  44. 7.8CVE-2022-33278EPSS 0.1%

    Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

  45. 7.8CVE-2022-33260EPSS 0.1%

    Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

  46. 7.8CVE-2022-33232EPSS 0.1%

    Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

  47. 5.5CVE-2022-33216EPSS 0.1%

    Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

  48. 7.8CVE-2022-33300EPSS 0.1%

    Memory corruption in Automotive Android OS due to improper input validation.

  49. 7.5CVE-2022-33290EPSS 0.4%

    Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

  50. 7.8CVE-2022-33274EPSS 0.1%

    Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.