Skip to content

Vulnerabilities of qualcomm sd855_firmware

Is your version affected?

CVE Summary Score Published
CVE-2023-21652 Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use 7.7 High Aug 8, 2023
CVE-2023-21651 Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE 9.3 Critical Aug 8, 2023
CVE-2023-21649 Memory corruption in WLAN while running doDriverCmd for an unspecific command 6.7 Medium Aug 8, 2023
CVE-2022-40510 Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder 9.8 Critical Aug 8, 2023
CVE-2023-28542 Memory Corruption in WLAN HOST while fetching TX status information 7.8 High Jul 4, 2023
CVE-2023-28541 Memory Corruption in Data Modem while processing DMA buffer release event about CFR data 7.8 High Jul 4, 2023
CVE-2023-21639 Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client 6.7 Medium Jul 4, 2023
CVE-2023-21638 Memory corruption in Video while calling APIs with different instance ID than the one received in initialization 6.7 Medium Jul 4, 2023
CVE-2023-21635 Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony 6.7 Medium Jul 4, 2023
CVE-2023-21633 Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request 6.7 Medium Jul 4, 2023
CVE-2023-21629 Memory Corruption in Modem due to double free while parsing the PKCS15 sim files 6.8 Medium Jul 4, 2023
CVE-2023-21669 Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address 8.2 High Jun 6, 2023
CVE-2022-40536 Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network 7.5 High Jun 6, 2023
CVE-2022-33307 Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed 8.4 High Jun 6, 2023
CVE-2022-33267 Memory corruption in Linux while sending DRM request 6.7 Medium Jun 6, 2023
CVE-2022-33264 Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message 7.9 High Jun 6, 2023
CVE-2022-33230 Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host 6.7 Medium Jun 6, 2023
CVE-2022-33227 Memory corruption in Linux android due to double free while calling unregister provider after register call 6.7 Medium Jun 6, 2023
CVE-2022-22060 Assertion occurs while processing Reconfiguration message due to improper validation 7.5 High Jun 6, 2023
CVE-2023-21665 Memory corruption in Graphics while importing a file 8.4 High May 2, 2023
CVE-2022-40508 Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which… 7.5 High May 2, 2023
CVE-2022-33298 Memory corruption due to use after free in Modem while modem initialization 6.7 Medium Apr 4, 2023
CVE-2022-33289 Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card 6.8 Medium Apr 4, 2023
CVE-2022-33288 Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write… 9.3 Critical Apr 4, 2023
CVE-2022-40515 Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms 7.3 High Mar 7, 2023

Other qualcomm products