Skip to content

Vulnerabilities of qualcomm wcd9335_firmware

Is your version affected?

CVE Summary Score Published
CVE-2023-21652 Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use 7.7 High Aug 8, 2023
CVE-2023-21651 Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE 9.3 Critical Aug 8, 2023
CVE-2022-40510 Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder 9.8 Critical Aug 8, 2023
CVE-2023-28542 Memory Corruption in WLAN HOST while fetching TX status information 7.8 High Jul 4, 2023
CVE-2023-28541 Memory Corruption in Data Modem while processing DMA buffer release event about CFR data 7.8 High Jul 4, 2023
CVE-2023-22386 Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory 7.8 High Jul 4, 2023
CVE-2023-21633 Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request 6.7 Medium Jul 4, 2023
CVE-2023-21629 Memory Corruption in Modem due to double free while parsing the PKCS15 sim files 6.8 Medium Jul 4, 2023
CVE-2023-21669 Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address 8.2 High Jun 6, 2023
CVE-2023-21657 Memoru corruption in Audio when ADSP sends input during record use case 7.8 High Jun 6, 2023
CVE-2022-40533 Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request 6.2 Medium Jun 6, 2023
CVE-2022-33264 Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message 7.9 High Jun 6, 2023
CVE-2022-33227 Memory corruption in Linux android due to double free while calling unregister provider after register call 6.7 Medium Jun 6, 2023
CVE-2023-21665 Memory corruption in Graphics while importing a file 8.4 High May 2, 2023
CVE-2022-33304 Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet 7.5 High May 2, 2023
CVE-2022-33298 Memory corruption due to use after free in Modem while modem initialization 6.7 Medium Apr 4, 2023
CVE-2022-33291 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length 8.2 High Apr 4, 2023
CVE-2022-33289 Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card 6.8 Medium Apr 4, 2023
CVE-2022-33287 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet 8.2 High Apr 4, 2023
CVE-2022-40535 Transient DOS due to buffer over-read in WLAN while sending a packet to device 7.5 High Mar 7, 2023
CVE-2022-40515 Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms 7.3 High Mar 7, 2023
CVE-2022-33278 Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than… 7.8 High Mar 7, 2023
CVE-2022-33257 Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone 9.3 Critical Mar 7, 2023
CVE-2022-33245 Memory corruption in WLAN due to use after free 6.7 Medium Mar 7, 2023
CVE-2022-33242 Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD 7.8 High Mar 7, 2023

Other qualcomm products