Browse CVEs

HIGH 7.8 CVE-2024-43052 Memory corruption while processing API calls to NPU with invalid input. Apq8017 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-43053 Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information. Fastconnect 6700 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-33044 Memory corruption while Configuring the SMR/S2CR register in Bypass mode. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-43048 Memory corruption when invalid input is passed to invoke GPU Headroom API call. Fastconnect 6200 Firmware No fix yet Fix from $1,9502024-12-02 HIGH 7.8 CVE-2016-10408 QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid ex… 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-11-26 HIGH 7.8 CVE-2018-11816 Crafted Binder Request Causes Heap UAF in MediaServer 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-11-26 HIGH 7.8 CVE-2018-5852 An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kern… Mdm9206 Firmware Mitigation only Fix from $1,9502024-11-26 MEDIUM 5.5 CVE-2017-18306 Information disclosure due to uninitialized variable. Sd 450 Firmware No fix yet Fix from $1,6002024-11-26 MEDIUM 5.5 CVE-2017-18307 Information disclosure possible while audio playback. Sd 450 Firmware No fix yet Fix from $1,6002024-11-26 HIGH 7.8 CVE-2018-11952 An image with a version lower than the fuse version may potentially be booted lead to improper authentication. Mdm9206 Firmware No fix yet Fix from $1,9502024-11-26 CRITICAL 9.8 CVE-2017-11076 On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can… Msm8909w Firmware Mitigation only Fix from $2,3002024-11-26 CRITICAL 9.8 CVE-2017-17772 In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation. Sd 450 Firmware Mitigation only Fix from $2,3002024-11-26 HIGH 7.8 CVE-2016-10394 Initial xbl_sec revision does not have all the debug policy features and critical checks. Mdm9206 Firmware No fix yet Fix from $1,9502024-11-26 HIGH 7.8 CVE-2017-15832 Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW Mdm9206 Firmware Mitigation only Fix from $1,9502024-11-26 HIGH 7.0 CVE-2017-18153 A race condition exists in a driver potentially leading to a use-after-free condition. 9206 Lte Modem Firmware No fix yet Fix from $1,9502024-11-26 MEDIUM 5.5 CVE-2018-11922 Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user. Mdm9206 Firmware No fix yet Fix from $1,6002024-11-26 HIGH 7.8 CVE-2017-9711 Certain unprivileged processes are able to perform IOCTL calls. Mdm9206 Firmware No fix yet Fix from $1,9502024-11-22 HIGH 7.8 CVE-2024-38399 Memory corruption while processing user packets to generate page faults. Wsa8835 Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-38397 Transient DOS while parsing probe response and assoc response frame. Snapdragon 8\+ Gen 2 Mobile Platform Firmware No fix yet Fix from $1,9502024-10-07 MEDIUM 6.1 CVE-2024-38425 Information disclosure while sending implicit broadcast containing APP launch information. Wsa8835 Firmware Mitigation only Fix from $1,6002024-10-07 HIGH 8.2 CVE-2024-33073 Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Wsa8845h Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33069 Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. Wsa8835 Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33070 Transient DOS while parsing ESP IE from beacon/probe response frame. Qca6574au Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33071 Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. Mdm9628 Firmware Mitigation only Fix from $1,9502024-10-07 CRITICAL 9.8 CVE-2024-33066 Memory corruption while redirecting log file to any file location with any file name. Snapdragon X65 5g Modem Rf System Firmware No fix yet Fix from $2,3002024-10-07 HIGH 8.2 CVE-2024-33064 Information disclosure while parsing the multiple MBSSID IEs from the beacon. Qca6574au Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.8 CVE-2024-33065 Memory corruption while taking snapshot when an offset variable is set by camera driver. Snapdragon 8cx Gen 2 5g Compute Platform \(sc8180x Ac\) Firmware Mitigation only Fix from $1,9502024-10-07 HIGH 7.5 CVE-2024-33049 Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. Snapdragon W5\+ Gen 1 Wearable Platform Firmware Mitigation only Fix from $1,9502024-10-07 MEDIUM 6.7 CVE-2024-23379 Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario. Wsa8835 Firmware Mitigation only Fix from $1,6002024-10-07