Skip to content

Vulnerabilities of qualcomm qca4004_firmware

Is your version affected?

CVE Summary Score Published
CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously 8.4 High Dec 2, 2024
CVE-2024-33016 memory corruption when an invalid firehose patch command is invoked 6.8 Medium Sep 2, 2024
CVE-2024-23362 Cryptographic issue while parsing RSA keys in COBR format 7.1 High Sep 2, 2024
CVE-2024-23359 Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network 8.2 High Sep 2, 2024
CVE-2024-23353 Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI 7.5 High Aug 5, 2024
CVE-2024-21469 Memory corruption when an invoke call and a TEE call are bound for the same trusted application 7.3 High Jul 1, 2024
CVE-2024-21465 Memory corruption while processing key blob passed by the user 7.8 High Jul 1, 2024
CVE-2024-21461 Memory corruption while performing finish HMAC operation when context is freed by keymaster 8.4 High Jul 1, 2024
CVE-2023-43551 Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase… 9.1 Critical Jun 3, 2024
CVE-2023-43542 Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked 7.8 High Jun 3, 2024
CVE-2023-28547 Memory corruption in SPS Application while requesting for public key in sorter TA 8.4 High Apr 1, 2024
CVE-2023-33066 Memory corruption in Audio while processing RT proxy port register driver 8.4 High Mar 4, 2024
CVE-2023-21651 Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE 9.3 Critical Aug 8, 2023
CVE-2022-40505 Information disclosure due to buffer over-read in Modem while parsing DNS hostname 8.2 High May 2, 2023
CVE-2022-33304 Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet 7.5 High May 2, 2023
CVE-2022-33291 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length 8.2 High Apr 4, 2023
CVE-2022-33289 Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card 6.8 Medium Apr 4, 2023
CVE-2022-33287 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet 8.2 High Apr 4, 2023
CVE-2022-33258 Information disclosure due to buffer over-read in modem while reading configuration parameters 8.2 High Apr 4, 2023
CVE-2022-33211 memory corruption in modem due to improper check while calculating size of serialized CoAP message 9.8 Critical Apr 4, 2023
CVE-2022-25745 Memory corruption in modem due to improper input validation while handling the incoming CoAP message 9.8 Critical Apr 4, 2023
CVE-2022-25740 Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address… 9.8 Critical Apr 4, 2023
CVE-2022-25739 Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call 7.5 High Apr 4, 2023
CVE-2022-25726 Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet 8.2 High Apr 4, 2023
CVE-2022-33257 Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone 9.3 Critical Mar 7, 2023

Other qualcomm products