Skip to content

Vulnerabilities of qualcomm qcs4290_firmware

Is your version affected?

CVE Summary Score Published
CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously 8.4 High Dec 2, 2024
CVE-2021-30299 Possible out of bound access in audio module due to lack of validation of user provided input 6.7 Medium Nov 22, 2024
CVE-2024-38423 Memory corruption while processing GPU page table switch 7.8 High Nov 4, 2024
CVE-2024-38422 Memory corruption while processing voice packet with arbitrary data received from ADSP 7.8 High Nov 4, 2024
CVE-2024-38415 Memory corruption while handling session errors from firmware 7.8 High Nov 4, 2024
CVE-2024-33060 Memory corruption when two threads try to map and unmap a single node simultaneously 8.4 High Sep 2, 2024
CVE-2024-33052 Memory corruption when user provides data for FM HCI command control operations 7.8 High Sep 2, 2024
CVE-2024-33051 Transient DOS while processing TIM IE from beacon frame as there is no check for IE length 7.5 High Sep 2, 2024
CVE-2024-33042 Memory corruption when Alternative Frequency offset value is set to 255 7.8 High Sep 2, 2024
CVE-2024-33016 memory corruption when an invalid firehose patch command is invoked 6.8 Medium Sep 2, 2024
CVE-2024-23362 Cryptographic issue while parsing RSA keys in COBR format 7.1 High Sep 2, 2024
CVE-2024-33014 Transient DOS while parsing ESP IE from beacon/probe response frame 7.5 High Aug 5, 2024
CVE-2024-23356 Memory corruption during session sign renewal request calls in HLOS 7.8 High Aug 5, 2024
CVE-2024-23353 Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI 7.5 High Aug 5, 2024
CVE-2024-23373 Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released 8.4 High Jul 1, 2024
CVE-2024-23368 Memory corruption when allocating and accessing an entry in an SMEM partition 7.8 High Jul 1, 2024
CVE-2024-21469 Memory corruption when an invoke call and a TEE call are bound for the same trusted application 7.3 High Jul 1, 2024
CVE-2024-21465 Memory corruption while processing key blob passed by the user 7.8 High Jul 1, 2024
CVE-2024-21461 Memory corruption while performing finish HMAC operation when context is freed by keymaster 8.4 High Jul 1, 2024
CVE-2023-43551 Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase… 9.1 Critical Jun 3, 2024
CVE-2023-43542 Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked 7.8 High Jun 3, 2024
CVE-2023-43529 Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received 7.5 High May 6, 2024
CVE-2024-21468 Memory corruption when there is failed unmap operation in GPU 8.4 High Apr 1, 2024
CVE-2023-33023 Memory corruption while processing finish_sign command to pass a rsp buffer 8.4 High Apr 1, 2024
CVE-2023-28547 Memory corruption in SPS Application while requesting for public key in sorter TA 8.4 High Apr 1, 2024

Other qualcomm products