Browse CVEs

HIGH 7.8 CVE-2024-43052 Memory corruption while processing API calls to NPU with invalid input. Apq8017 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-43053 Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information. Fastconnect 6700 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-33044 Memory corruption while Configuring the SMR/S2CR register in Bypass mode. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-43048 Memory corruption when invalid input is passed to invoke GPU Headroom API call. Fastconnect 6200 Firmware No fix yet Fix from $1,9502024-12-02 HIGH 7.5 CVE-2024-33063 Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. Ar8035 Firmware Patch available Fix from $1,9502024-12-02 HIGH 7.0 CVE-2024-33040 Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between … Fastconnect 6800 Firmware Patch available Fix from $1,9502024-12-02 MEDIUM 6.7 CVE-2024-33053 Memory corruption when multiple threads try to unregister the CVP buffer at the same time. C V2x 9150 Firmware Patch available Fix from $1,6002024-12-02 MEDIUM 6.7 CVE-2024-33039 Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service. Qam8255p Firmware Patch available Fix from $1,6002024-12-02 MEDIUM 6.1 CVE-2024-33037 Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the fi… C V2x 9150 Firmware Patch available Fix from $1,6002024-12-02 MEDIUM 6.7 CVE-2024-33036 Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can … C V2x 9150 Firmware Patch available Fix from $1,6002024-12-02 HIGH 7.8 CVE-2016-10408 QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid ex… 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-11-26 HIGH 7.8 CVE-2018-11816 Crafted Binder Request Causes Heap UAF in MediaServer 9206 Lte Modem Firmware Mitigation only Fix from $1,9502024-11-26 HIGH 7.8 CVE-2018-5852 An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kern… Mdm9206 Firmware Mitigation only Fix from $1,9502024-11-26 MEDIUM 5.5 CVE-2017-18306 Information disclosure due to uninitialized variable. Sd 450 Firmware No fix yet Fix from $1,6002024-11-26 MEDIUM 5.5 CVE-2017-18307 Information disclosure possible while audio playback. Sd 450 Firmware No fix yet Fix from $1,6002024-11-26 HIGH 7.8 CVE-2018-11952 An image with a version lower than the fuse version may potentially be booted lead to improper authentication. Mdm9206 Firmware No fix yet Fix from $1,9502024-11-26 CRITICAL 9.8 CVE-2017-11076 On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can… Msm8909w Firmware Mitigation only Fix from $2,3002024-11-26 CRITICAL 9.8 CVE-2017-17772 In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation. Sd 450 Firmware Mitigation only Fix from $2,3002024-11-26 HIGH 7.8 CVE-2016-10394 Initial xbl_sec revision does not have all the debug policy features and critical checks. Mdm9206 Firmware No fix yet Fix from $1,9502024-11-26 HIGH 7.8 CVE-2017-15832 Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW Mdm9206 Firmware Mitigation only Fix from $1,9502024-11-26 HIGH 7.0 CVE-2017-18153 A race condition exists in a driver potentially leading to a use-after-free condition. 9206 Lte Modem Firmware No fix yet Fix from $1,9502024-11-26 MEDIUM 5.5 CVE-2018-11922 Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user. Mdm9206 Firmware No fix yet Fix from $1,6002024-11-26 MEDIUM 6.7 CVE-2021-30299 Possible out of bound access in audio module due to lack of validation of user provided input. Wsa8835 Firmware Patch available Fix from $1,6002024-11-22 HIGH 7.8 CVE-2017-9711 Certain unprivileged processes are able to perform IOCTL calls. Mdm9206 Firmware No fix yet Fix from $1,9502024-11-22 HIGH 7.8 CVE-2024-38423 Memory corruption while processing GPU page table switch. Wsa8835 Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-38424 Memory corruption during GNSS HAL process initialization. Snapdragon W5\+ Gen 1 Wearable Platform Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-38415 Memory corruption while handling session errors from firmware. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-38419 Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-38421 Memory corruption while processing GPU commands. Wsa8845h Firmware Patch available Fix from $1,9502024-11-04