Latest qualcomm sc8180x firmware vulnerabilities since last week (CVE List)

● CVE-2022-40514

Buffer copy without checking size of input in WLAN Firmware

Google Android

Qualcomm Ar8031

Google Android

and 907 more

● CVE-2022-40512

Buffer over-read in WLAN Firmware.

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

and 1175 more

● CVE-2022-33233

Configuration weakness in modem

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8009w Firmware

Qualcomm Apq8009w

Qualcomm Apq8017 Firmware

and 799 more

● CVE-2022-33277

Buffer copy without checking size of input in modem

Google Android

Qualcomm Ar8031

Google Android

and 967 more

● CVE-2022-33271

Buffer over-read in WLAN

Google Android

Qualcomm Apq8096au

Qualcomm Apq8096au Firmware

Qualcomm Aqt1000

Qualcomm Aqt1000 Firmware

Qualcomm Ar8031

and 975 more

● CVE-2022-33248

Integer overflow to buffer overflow in User Identity Module

Google Android

Qualcomm Apq8009

Google Android

and 643 more

● CVE-2022-40520

Memory corruption due to stack-based buffer overflow in Core

Google Android

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

Qualcomm Apq8096au Firmware

Qualcomm Apq8096au

Qualcomm Aqt1000 Firmware

and 289 more

● CVE-2022-40519

Information disclosure due to buffer overread in Core

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 380 more

● CVE-2022-40517

Memory corruption in core due to stack-based buffer overflow

Google Android

Qualcomm Ar8031

Google Android

and 357 more

● CVE-2022-40518

Information disclosure due to buffer overread in Core

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 314 more

● CVE-2022-40516

Memory corruption in Core due to stack-based buffer overflow.

Google Android

Qualcomm Ar8031

Google Android

and 363 more

● CVE-2022-33284

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.

Google Android

Qualcomm Ar8035

Qualcomm Ar9380 Firmware

Qualcomm Ar9380

and 347 more

● CVE-2022-33285

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 551 more

● CVE-2022-33286

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

and 557 more

● CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Conne...

Qualcomm Apq8097 Firmware

Qualcomm Apq8097

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Ipq6000

and 152 more

● CVE-2020-11301

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 529 more

● CVE-2021-1914

Google Android

Qualcomm Apq8009

Google Android

and 305 more

● CVE-2021-1919

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8009

Google Android

and 305 more

● CVE-2021-1920

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...

Google Android

Qualcomm Apq8009

Google Android

and 337 more

● CVE-2021-1916

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,...

Google Android

Qualcomm Apq8009

Google Android

and 359 more

● CVE-2021-1896

Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Qualcomm Qca6164 Firmware

Qualcomm Qca6164

Qualcomm Qca6174 Firmware

Qualcomm Qca6174

and 38 more

● CVE-2020-11176

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdrago...

Google Android

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Aqt1000 Firmware

and 193 more

● CVE-2020-11255

Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, Snapdragon Compute, Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8037 Firmware

and 683 more

● CVE-2020-11252

Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I...

Google Android

Qualcomm Ar8031

Google Android

and 615 more

● CVE-2020-11226

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11189

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11199

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11188

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 791 more

● CVE-2020-11166

Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

and 811 more

● CVE-2020-11218

Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr...

Google Android

Qualcomm Apq8017

Google Android

and 543 more

● CVE-2020-11190

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11227

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu...

Google Android

Qualcomm Apq8009

Google Android

and 797 more

● CVE-2020-11222

Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...

Google Android

Qualcomm Apq8017

Google Android

and 543 more

● CVE-2020-11171

Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 765 more

● CVE-2020-3664

Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap...

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Google Android

Qualcomm Ar8031

Qualcomm Ar8035 Firmware

Qualcomm Ar8035

and 624 more

● CVE-2020-11204

Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdrag...

Google Android

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

and 1033 more

● CVE-2020-11195

Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn...

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8016 Firmware

Google Android

Qualcomm Apq8064au Firmware

and 781 more

● CVE-2020-11163

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdrago...

Google Android

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Qualcomm Ar8035 Firmware

and 495 more

● CVE-2020-11281

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

Google Android

Qualcomm Ar8031

Google Android

and 689 more

● CVE-2020-11253

Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...

Google Android

Qualcomm Pm3003a Firmware

Qualcomm Pm3003a

Google Android

and 341 more

● CVE-2020-11170

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr...

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8009w Firmware

Qualcomm Apq8009w

Qualcomm Apq8017 Firmware

and 1005 more

● CVE-2020-11275

Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8017 Firmware

Qualcomm Apq8017

Qualcomm Apq8053 Firmware

and 937 more

● CVE-2020-11278

Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sna...

Google Android

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Google Android

Qualcomm Ar8031

Qualcomm Ar8035 Firmware

and 749 more

● CVE-2020-11130

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, ...

Google Android

Qualcomm Qm215 Firmware

Qualcomm Qm215

and 56 more

● CVE-2020-11121

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobil...

Google Android

Qualcomm Qm215 Firmware

Qualcomm Qm215

and 56 more

● CVE-2020-11153

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti...

Qualcomm Apq8053 Firmware

Qualcomm Apq8053

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Google Android

and 6 more

● CVE-2020-11123

u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the sta...

Google Android

Qualcomm Apq8009

Google Android

and 225 more

● CVE-2020-11127

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snap...

Google Android

Qualcomm Qcs405 Firmware

and 101 more

● CVE-2020-3684

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Sna...

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8098

and 85 more

● CVE-2020-3638

u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, ...

Google Android

Qualcomm Agatti Firmware

Qualcomm Agatti

Google Android

and 27 more

Latest qualcomm sc8180x firmware Vulnerabilities

Company

Resources

Contact