Qualcomm
Qualcomm Sd695 Firmware: vulnerabilidades y CVE
Qualcomm Sd695 Firmware tiene 110 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 18 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE110
Últimos 12 meses0
Críticas18
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-22071 | Alta (7.8) | 0.46% | ⚠ Explotación activa | 14 jun 2022 | Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-28538 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. |
| CVE-2023-21646 | Alta (7.5) | 0.38% | — | 5 sept 2023 | Transient DOS in Modem while processing invalid System Information Block 1. |
| CVE-2023-21644 | Alta (7.8) | 0.11% | — | 5 sept 2023 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. |
| CVE-2023-21636 | Alta (7.8) | 0.11% | — | 5 sept 2023 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
| CVE-2023-28537 | Alta (7.8) | 0.12% | — | 8 ago 2023 | Memory corruption while allocating memory in COmxApeDec module in Audio. |
| CVE-2023-22666 | Alta (7.8) | 0.12% | — | 8 ago 2023 | Memory Corruption in Audio while playing amrwbplus clips with modified content. |
| CVE-2023-21652 | Alta (7.1) | 0.10% | — | 8 ago 2023 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. |
| CVE-2023-21651 | Alta (7.8) | 0.12% | — | 8 ago 2023 | Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. |
| CVE-2023-21649 | Alta (7.8) | 0.11% | — | 8 ago 2023 | Memory corruption in WLAN while running doDriverCmd for an unspecific command. |
| CVE-2023-21626 | Alta (7.1) | 0.11% | — | 8 ago 2023 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. |
| CVE-2022-40510 | Crítica (9.8) | 0.43% | — | 8 ago 2023 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. |
| CVE-2022-40537 | Crítica (9.8) | 0.36% | — | 10 mar 2023 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
| CVE-2022-40535 | Alta (7.5) | 0.41% | — | 10 mar 2023 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
| CVE-2022-40531 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
| CVE-2022-40530 | Alta (7.8) | 0.13% | — | 10 mar 2023 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
| CVE-2022-40515 | Crítica (9.8) | 0.33% | — | 10 mar 2023 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
| CVE-2022-33278 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
| CVE-2022-33272 | Alta (7.5) | 0.41% | — | 10 mar 2023 | Transient DOS in modem due to reachable assertion. |
| CVE-2022-33257 | Alta (7) | 0.09% | — | 10 mar 2023 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
| CVE-2022-33256 | Crítica (9.8) | 0.53% | — | 10 mar 2023 | Memory corruption due to improper validation of array index in Multi-mode call processor. |
| CVE-2022-33254 | Alta (7.5) | 0.41% | — | 10 mar 2023 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message. |
| CVE-2022-33250 | Alta (7.5) | 0.41% | — | 10 mar 2023 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. |
| CVE-2022-33244 | Alta (7.5) | 0.41% | — | 10 mar 2023 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout |
| CVE-2022-33242 | Alta (7.8) | 0.14% | — | 10 mar 2023 | Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
| CVE-2022-33213 | Alta (8.8) | 0.41% | — | 10 mar 2023 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
| CVE-2022-25709 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
| CVE-2022-25705 | Alta (7.8) | 0.13% | — | 10 mar 2023 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
| CVE-2022-25694 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
| CVE-2022-25655 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
| CVE-2022-22075 | Media (5.5) | 0.12% | — | 10 mar 2023 | Information Disclosure in Graphics during GPU context switch. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.