Latest qualcomm sm6150 firmware Vulnerabilities

● CVE-2022-33273

Buffer over-read in Trusted Execution Environment

Google Android

Qualcomm Ar8035

Google Android

and 391 more

● CVE-2023-21665

Incorrect Type Conversion or Cast in Graphics

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

Qualcomm Apq8017 Firmware

and 875 more

● CVE-2022-40504

Reachable assertion in Modem

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

Qualcomm Apq8017

Google Android

and 751 more

● CVE-2023-21666

Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Qualcomm Wcn685x-5 Firmware

and 655 more

● CVE-2022-33298

Use after free in Modem

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Qualcomm Wcn3998 Firmware

Qualcomm Wcn3998

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

and 302 more

● CVE-2022-33296

Integer overflow to buffer overflow in Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

and 450 more

● CVE-2022-33302

Improper validation of array index in User Identity Module

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

and 895 more

● CVE-2022-40532

Integer overflow or wraparound in WLAN

Google Android

Qualcomm 315 5g Iot Modem

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm Apq8016

and 1407 more

● CVE-2022-33289

Improper validation of array index in Modem

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Qualcomm 9205 Lte Modem Firmware

Qualcomm 9205 Lte Modem

Qualcomm 9206 Lte Modem Firmware

and 899 more

● CVE-2022-40503

Buffer over-read in Bluetooth Host.

Google Android

Qualcomm 9206 Lte Modem Firmware

Qualcomm 9206 Lte Modem

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

and 735 more

● CVE-2022-33288

Buffer copy without checking the size of input in Core

Google Android

Qualcomm 315 5g Iot Modem Firmware

Qualcomm 315 5g Iot Modem

Google Android

and 507 more

● CVE-2020-11201

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap...

Google Android

Qualcomm Qcs603 Firmware

Qualcomm Qcs603

and 50 more

● CVE-2020-3632

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM8350, SC7180, SDX55, SDX55M, SM6150, SM6250, SM6250P, SM7125...

Google Android

Qualcomm Qsm8350 Firmware

Qualcomm Qsm8350

Google Android

Qualcomm Sdx55 Firmware

and 33 more

● CVE-2020-11162

u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Bitra Firmware

and 75 more

● CVE-2020-11174

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, ...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8017 Firmware

and 97 more

● CVE-2020-3690

u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 53 more

● CVE-2020-11173

u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Bitra Firmware

and 61 more

● CVE-2020-3638

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Bitra Firmware

Qualcomm Bitra

Qualcomm Kamorta Firmware

and 27 more

● CVE-2020-11164

u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Apq8096au Firmware

Qualcomm Apq8096au

Qualcomm Apq8098 Firmware

and 55 more

● CVE-2020-3654

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Apq8096au Firmware

and 77 more

● CVE-2020-11125

u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Bitra Firmware

and 91 more

● CVE-2020-3647

u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607...

Google Android

Qualcomm Mdm9607

Qualcomm Qcs405 Firmware

Qualcomm Qcs405

Qualcomm Sc8180x Firmware

Qualcomm Sc8180x

and 8 more

● CVE-2020-3656

Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr...

Google Android

Qualcomm Apq8009

Google Android

and 51 more

● CVE-2020-3617

u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute, Snapdrago...

Google Android

Qualcomm Nicobar

Qualcomm Qcs605 Firmware

and 27 more

● CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the ...

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Ipq4019 Firmware

Qualcomm Ipq4019

Qualcomm Ipq8064 Firmware

Qualcomm Ipq8064

and 207 more

● CVE-2020-11124

u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd...

Google Android

Qualcomm Mdm9607

Google Android

Qualcomm Nicobar

Qualcomm Qcs404 Firmware

and 29 more

● CVE-2020-3629

u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP attributes' in Snapdragon Auto, Snapdragon Compute, ...

Google Android

Qualcomm Rennell Firmware

and 15 more

● CVE-2020-3640

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wrong input' in Snapdrag...

Google Android

Qualcomm Qcs404 Firmware

and 19 more

● CVE-2019-14056

u'Possible integer overflow in API due to lack of check on large oid range count in cert extension field' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn...

Google Android

and 53 more

● CVE-2019-14119

u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon...

Google Android

Qualcomm Ipq6018

Google Android

and 45 more

● CVE-2019-14025

u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to a invalid address' in...

Google Android

Qualcomm Qcs404 Firmware

Google Android

and 15 more

● CVE-2019-14124

Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamo...

Google Android

Qualcomm Qcs404 Firmware

Google Android

Qualcomm Rennell Firmware

and 13 more

● CVE-2019-14130

Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastr...

Google Android

Qualcomm Qcs404 Firmware

Google Android

Qualcomm Rennell Firmware

and 13 more

● CVE-2019-14043

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag...

Google Android

and 54 more

● CVE-2020-3642

Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snapdragon Consumer IOT, Snapdragon Mobile in...

Google Android

Qualcomm Qcs605 Firmware

Google Android

Qualcomm Rennell Firmware

and 21 more

● CVE-2019-10597

kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, ...

Google Android

Qualcomm Ipq6018

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

Qualcomm Msm8996 Firmware

and 35 more

● CVE-2020-3610

Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this object in Snapdragon Auto, Snapdragon Compute...

Google Android

Qualcomm Apq8009

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Google Android

and 69 more

● CVE-2020-3641

Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

Google Android

Qualcomm Apq8009

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Google Android

and 71 more

● CVE-2020-3616

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Google Android

Qualcomm Apq8017

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Google Android

and 49 more

● CVE-2020-3630

Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO...

Google Android

Qualcomm Apq8009

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Google Android

and 91 more

● CVE-2019-14066

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdrag...

Google Android

and 23 more

● CVE-2020-3645

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics...

Google Android

Qualcomm Ipq6018

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

Google Android

and 41 more

● CVE-2020-3633

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn...

Google Android

Qualcomm Apq8009

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Google Android

and 69 more

● CVE-2019-10621

Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mo...

Google Android

Qualcomm Nicobar

Qualcomm Qcs405 Firmware

Qualcomm Qcs405

Qualcomm Rennell Firmware

Google Android

and 16 more

● CVE-2019-14131

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Google Android

and 37 more

● CVE-2019-14134

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In...

Google Android

Qualcomm Ipq8074 Firmware

Qualcomm Ipq8074

Qualcomm Qca8081 Firmware

Google Android

Qualcomm Qcs605 Firmware

and 19 more

● CVE-2019-10553

Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus...

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

and 103 more

● CVE-2019-14032

Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & M...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

and 63 more

● CVE-2019-14026

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connect...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

and 91 more

● CVE-2019-2311

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8096 Firmware

Google Android

and 77 more

Latest qualcomm sm6150 firmware Vulnerabilities

Company

Resources

Contact