Qualcomm
Qualcomm Sd7c Firmware: vulnerabilidades y CVE
Qualcomm Sd7c Firmware tiene 138 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 14 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE138
Últimos 12 meses0
Críticas14
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-28538 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. |
| CVE-2023-21626 | Alta (7.1) | 0.11% | — | 8 ago 2023 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. |
| CVE-2022-40510 | Crítica (9.8) | 0.43% | — | 8 ago 2023 | Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder. |
| CVE-2022-40532 | Alta (7.8) | 0.12% | — | 13 abr 2023 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
| CVE-2022-33302 | Alta (7.8) | 0.12% | — | 13 abr 2023 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. |
| CVE-2022-33296 | Alta (7.8) | 0.11% | — | 13 abr 2023 | Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
| CVE-2022-33289 | Media (6.8) | 0.19% | — | 13 abr 2023 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
| CVE-2022-33231 | Alta (7.8) | 0.08% | — | 13 abr 2023 | Memory corruption due to double free in core while initializing the encryption key. |
| CVE-2022-40531 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
| CVE-2022-33242 | Alta (7.8) | 0.14% | — | 10 mar 2023 | Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
| CVE-2022-33213 | Alta (8.8) | 0.41% | — | 10 mar 2023 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
| CVE-2022-25709 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
| CVE-2022-25705 | Alta (7.8) | 0.13% | — | 10 mar 2023 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
| CVE-2022-25694 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
| CVE-2022-25655 | Alta (7.8) | 0.12% | — | 10 mar 2023 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
| CVE-2022-40514 | Crítica (9.8) | 0.47% | — | 12 feb 2023 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
| CVE-2022-40512 | Alta (7.5) | 0.42% | — | 12 feb 2023 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
| CVE-2022-33277 | Alta (7.8) | 0.12% | — | 12 feb 2023 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
| CVE-2022-33271 | Alta (7.5) | 0.38% | — | 12 feb 2023 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame. |
| CVE-2022-33248 | Alta (7.8) | 0.13% | — | 12 feb 2023 | Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http. |
| CVE-2022-33233 | Alta (7.8) | 0.12% | — | 12 feb 2023 | Memory corruption due to configuration weakness in modem wile sending command to write protected files. |
| CVE-2022-40520 | Alta (7.8) | 0.70% | — | 9 ene 2023 | Memory corruption due to stack-based buffer overflow in Core |
| CVE-2022-40519 | Media (5.5) | 0.11% | — | 9 ene 2023 | Information disclosure due to buffer overread in Core |
| CVE-2022-40518 | Media (5.5) | 0.11% | — | 9 ene 2023 | Information disclosure due to buffer overread in Core |
| CVE-2022-40517 | Alta (7.8) | 0.14% | — | 9 ene 2023 | Memory corruption in core due to stack-based buffer overflow |
| CVE-2022-40516 | Alta (7.8) | 0.87% | — | 9 ene 2023 | Memory corruption in Core due to stack-based buffer overflow. |
| CVE-2022-33286 | Media (6.5) | 0.38% | — | 9 ene 2023 | Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames. |
| CVE-2022-33285 | Media (6.5) | 0.38% | — | 9 ene 2023 | Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. |
| CVE-2022-33284 | Media (6.5) | 0.35% | — | 9 ene 2023 | Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. |
| CVE-2022-33238 | Alta (7.5) | 0.42% | — | 13 dic 2022 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,… |