CVEs (703)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Qualcomm 1858905 Firmware 8909 Firmware8953 Firmware+182 moreNov 21, 2024 Apr 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
1Qualcomm 225315 5g Iot Modem Firmware 8905 Firmware8909 Firmware+222 moreNov 21, 2024 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. |
1Qualcomm 114315 5g Iot Modem Firmware 8905 Firmware8909 Firmware+111 moreNov 21, 2024 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
1Qualcomm 226315 5g Iot Modem Firmware 7wcn785x 1 Firmware8905 Firmware+223 moreNov 21, 2024 Apr 13, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
1Qualcomm 128315 5g Iot Modem Firmware Aqt1000 FirmwareAr8035 Firmware+125 moreNov 21, 2024 Apr 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
1Qualcomm 101Aqt1000 Firmware Ar8035 FirmwareQam8295p Firmware+98 moreNov 21, 2024 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
1Qualcomm 219315 5g Iot Modem Firmware 8098 Firmware8909 Firmware+216 moreNov 21, 2024 Apr 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to double free in core while initializing the encryption key. |
1Qualcomm 162Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+159 moreNov 21, 2024 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
1Qualcomm 284Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+281 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
1Qualcomm 159Apq8009 Firmware Apq8009w FirmwareApq8052 Firmware+156 moreNov 21, 2024 Mar 10, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
1Qualcomm 140Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+137 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
1Qualcomm 157Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+154 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
1Qualcomm 209Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+206 moreNov 21, 2024 Mar 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption in modem due to buffer overflow while processing a PPP packet |
1Qualcomm 201Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+198 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
1Qualcomm 208Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+205 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
1Qualcomm 238Apq8009 Firmware Apq8017 FirmwareApq8076 Firmware+235 moreNov 21, 2024 Mar 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
1Qualcomm 183Apq8009 Firmware Apq8009w FirmwareApq8017 Firmware+180 moreNov 21, 2024 Mar 10, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information Disclosure in Graphics during GPU context switch. |
1Qualcomm 228Aqt1000 Firmware Ar8031 FirmwareAr8035 Firmware+225 moreNov 21, 2024 Feb 12, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
1Qualcomm 295Apq8009 Firmware Apq8017 FirmwareApq8064au Firmware+292 moreNov 21, 2024 Feb 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
1Qualcomm 62Apq8096au Firmware Ar8031 FirmwareAr8035 Firmware+59 moreNov 21, 2024 Feb 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet. |