← Back

Qca6390 Firmware

qca6390_firmware

Vendor: Qualcomm • 518 CVEs

CVEs (518)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-25659
1Qualcomm
154Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+151 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo...Show more
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-25658
1Qualcomm
145Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+142 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...Show more
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-25657
1Qualcomm
107Apq8017 Firmware
Apq8053 FirmwareAqt1000 Firmware+104 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2022-22096
1Qualcomm
57Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+54 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-22080
1Qualcomm
112Apq8053 Firmware
Apq8096au FirmwareAqt1000 Firmware+109 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicShow less
CVE-2022-22070
1Qualcomm
145Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+142 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...Show more
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22069
1Qualcomm
87Aqt1000 Firmware
Qca6390 FirmwareQca6391 Firmware+84 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wea...Show more
Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2022-22067
1Qualcomm
59Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+56 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-22062
1Qualcomm
199Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+196 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Co...Show more
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingShow less
CVE-2022-22061
1Qualcomm
33Ar8035 Firmware
Qca6390 FirmwareQca6391 Firmware+30 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-22059
1Qualcomm
95Apq8017 Firmware
Apq8053 FirmwareAqt1000 Firmware+92 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-35135
1Qualcomm
168Apq8017 Firmware
Apq8037 FirmwareApq8053 Firmware+165 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo...Show more
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2021-35132
1Qualcomm
110Aqt1000 Firmware
Ar8035 FirmwareQca6390 Firmware+107 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...Show more
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2021-35122
1Qualcomm
101Aqt1000 Firmware
Ar8035 FirmwareQca6390 Firmware+98 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn...Show more
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesShow less
CVE-2021-35097
1Qualcomm
129Aqt1000 Firmware
Ar8031 FirmwareAr8035 Firmware+126 more
Nov 21, 2024
Sep 2, 2022
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap...Show more
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22087
1Qualcomm
155Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+152 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...Show more
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22086
1Qualcomm
140Apq8009w Firmware
Apq8017 FirmwareApq8053 Firmware+137 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...Show more
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22085
1Qualcomm
155Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+152 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra...Show more
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22084
1Qualcomm
153Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+150 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...Show more
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less
CVE-2022-22083
1Qualcomm
151Apq8009 Firmware
Apq8009w FirmwareApq8017 Firmware+148 more
Nov 21, 2024
Jun 14, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn...Show more
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesShow less