Latest qualcomm sc8180x firmware vulnerabilities since last week (CVE List)

● CVE-2022-33248

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 319 more

● CVE-2022-33277

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 481 more

● CVE-2022-33271

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Google Android

Qualcomm Ar8031

and 485 more

● CVE-2022-40514

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 451 more

● CVE-2022-33233

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 397 more

● CVE-2022-40512

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 585 more

● CVE-2022-40518

Information disclosure due to buffer overread in Core

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 314 more

● CVE-2022-40517

Memory corruption in core due to stack-based buffer overflow

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 357 more

● CVE-2022-40519

Information disclosure due to buffer overread in Core

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 380 more

● CVE-2022-40520

Memory corruption due to stack-based buffer overflow in Core

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

Google Android

and 289 more

● CVE-2022-40516

Memory corruption in Core due to stack-based buffer overflow.

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 363 more

● CVE-2022-33285

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 551 more

● CVE-2022-33286

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 557 more

● CVE-2022-33284

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

Google Android

Qualcomm Ar8035

Qualcomm Ar9380 Firmware

Qualcomm Ar9380

and 347 more

● CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Conne...

Qualcomm Apq8097 Firmware

Qualcomm Apq8097

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Ipq6000

and 152 more

● CVE-2020-11301

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 529 more

● CVE-2021-1919

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8009

Google Android

and 305 more

● CVE-2021-1920

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...

Google Android

Qualcomm Apq8009

Google Android

and 337 more

● CVE-2021-1916

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,...

Google Android

Qualcomm Apq8009

Google Android

and 359 more

● CVE-2021-1914

Google Android

Qualcomm Apq8009

Google Android

and 305 more

● CVE-2021-1896

Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity

Google Android

Qualcomm Qca6164 Firmware

Qualcomm Qca6164

Qualcomm Qca6174 Firmware

Qualcomm Qca6174

and 38 more

● CVE-2020-11176

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdrago...

Google Android

Qualcomm Apq8017

Google Android

and 193 more

● CVE-2020-11252

Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I...

Google Android

Qualcomm Ar8031

Google Android

and 615 more

● CVE-2020-11171

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 765 more

● CVE-2020-11227

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11222

Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...

Google Android

Qualcomm Apq8017

Google Android

and 543 more

● CVE-2020-11218

Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr...

Google Android

Qualcomm Apq8017

Google Android

and 543 more

● CVE-2020-11190

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11226

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11189

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11199

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11188

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 791 more

● CVE-2020-11166

Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

and 811 more

● CVE-2020-3664

Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 624 more

● CVE-2020-11204

Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdrag...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

and 1033 more

● CVE-2020-11195

Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

Qualcomm Apq8064au Firmware

and 781 more

● CVE-2020-11278

Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sna...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 749 more

● CVE-2020-11275

Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 937 more

● CVE-2020-11163

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdrago...

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Ar8035

and 495 more

● CVE-2020-11170

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 1005 more

● CVE-2020-11253

Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...

Google Android

Qualcomm Pm3003a Firmware

Qualcomm Pm3003a

Google Android

and 341 more

● CVE-2020-11281

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 689 more

● CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, ...

Google Android

Qualcomm Qm215 Firmware

Qualcomm Qm215

and 56 more

● CVE-2020-11121

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobil...

Google Android

Qualcomm Qm215 Firmware

Qualcomm Qm215

and 56 more

● CVE-2020-11153

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti...

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Google Android

and 6 more

● CVE-2020-11127

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snap...

Google Android

Qualcomm Qcs405 Firmware

and 101 more

● CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the sta...

Google Android

Qualcomm Apq8009

Google Android

and 225 more

● CVE-2020-11156

u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr...

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Google Android

Qualcomm Qcs404 Firmware

and 11 more

● CVE-2020-11155

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Qca6390 Firmware

and 17 more

● CVE-2020-11173

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 61 more

Latest qualcomm sc8180x firmware Vulnerabilities

Company

Resources

Contact