CVEs (736)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 23Mdm9206 Firmware Mdm9607 FirmwareMdm9640 Firmware+20 moreJan 9, 2025 Nov 26, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat' |
1Qualcomm 23Mdm9206 Firmware Mdm9607 FirmwareMdm9640 Firmware+20 moreJan 9, 2025 Nov 26, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An image with a version lower than the fuse version may potentially be booted lead to improper authentication. |
1Qualcomm 22215 Firmware Mdm9206 FirmwareMdm9607 Firmware+19 moreJan 9, 2025 Nov 26, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user. |
1Qualcomm 5Mdm9206 Firmware Mdm9607 FirmwareSd 835 Firmware+2 moreJan 9, 2025 Nov 26, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW |
1Qualcomm 5Mdm9206 Firmware Mdm9607 FirmwareSd 835 Firmware+2 moreJan 9, 2025 Nov 26, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Initial xbl_sec revision does not have all the debug policy features and critical checks. |
1Qualcomm 23Mdm9206 Firmware Mdm9607 FirmwareMdm9640 Firmware+20 moreNov 25, 2024 Nov 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Certain unprivileged processes are able to perform IOCTL calls. |
1Qualcomm 185Apq8009 Firmware Apq8017 FirmwareApq8037 Firmware+182 moreNov 21, 2024 Aug 8, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. |
1Qualcomm 204Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+201 moreNov 21, 2024 Aug 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. |
1Qualcomm 162Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+159 moreNov 21, 2024 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
1Qualcomm 284Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+281 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
1Qualcomm 159Apq8009 Firmware Apq8009w FirmwareApq8052 Firmware+156 moreNov 21, 2024 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
1Qualcomm 209Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+206 moreNov 21, 2024 Mar 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption in modem due to buffer overflow while processing a PPP packet |
1Qualcomm 201Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+198 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
1Qualcomm 238Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+235 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
1Qualcomm 183Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+180 moreNov 21, 2024 Mar 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure in Graphics during GPU context switch. |
1Qualcomm 295Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+292 moreNov 21, 2024 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
1Qualcomm 201Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+198 moreNov 21, 2024 Feb 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to configuration weakness in modem wile sending command to write protected files. |
1Qualcomm 21Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+18 moreNov 21, 2024 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. |
1Qualcomm 35Ar8031 Firmware Csra6620 FirmwareCsra6640 Firmware+32 moreNov 21, 2024 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure in modem due to buffer over-red while performing checksum of packet received |