Qualcomm
Qualcomm Sdm670 Firmware: vulnerabilidades y CVE
Qualcomm Sdm670 Firmware tiene 244 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 82 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE244
Últimos 12 meses0
Críticas82
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-33080 | Alta (7.5) | 0.34% | — | 5 dic 2023 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| CVE-2023-33022 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption in HLOS while invoking IOCTL calls from user-space. |
| CVE-2023-33018 | Alta (7.8) | 0.11% | — | 5 dic 2023 | Memory corruption while using the UIM diag command to get the operators name. |
| CVE-2023-33017 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. |
| CVE-2023-33059 | Alta (7.8) | 0.11% | — | 7 nov 2023 | Memory corruption in Audio while processing the VOC packet data from ADSP. |
| CVE-2023-33027 | Alta (7.5) | 0.32% | — | 3 oct 2023 | Transient DOS in WLAN Firmware while parsing rsn ies. |
| CVE-2023-28560 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
| CVE-2023-21670 | Alta (7.8) | 0.12% | — | 6 jun 2023 | Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. |
| CVE-2023-21659 | Alta (7.5) | 0.38% | — | 6 jun 2023 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
| CVE-2023-21628 | Alta (7.8) | 0.12% | — | 6 jun 2023 | Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. |
| CVE-2022-40529 | Alta (7.8) | 0.10% | — | 6 jun 2023 | Memory corruption due to improper access control in kernel while processing a mapping request from root process. |
| CVE-2022-40523 | Media (5.5) | 0.11% | — | 6 jun 2023 | Information disclosure in Kernel due to indirect branch misprediction. |
| CVE-2022-40521 | Alta (7.5) | 0.35% | — | 6 jun 2023 | Transient DOS due to improper authorization in Modem |
| CVE-2022-40507 | Alta (7.8) | 1.3% | — | 6 jun 2023 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
| CVE-2022-33307 | Alta (7.8) | 0.12% | — | 6 jun 2023 | Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed. |
| CVE-2022-33264 | Alta (7.8) | 0.11% | — | 6 jun 2023 | Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message. |
| CVE-2022-22076 | Media (5.5) | 0.11% | — | 6 jun 2023 | information disclosure due to cryptographic issue in Core during RPMB read request. |
| CVE-2022-40504 | Alta (7.5) | 0.38% | — | 2 may 2023 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. |
| CVE-2022-33273 | Media (5.5) | 0.12% | — | 2 may 2023 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation. |
| CVE-2023-21666 | Alta (7.8) | 0.18% | — | 2 may 2023 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. |
| CVE-2023-21665 | Alta (7.8) | 0.18% | — | 2 may 2023 | Memory corruption in Graphics while importing a file. |
| CVE-2022-40532 | Alta (7.8) | 0.12% | — | 13 abr 2023 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
| CVE-2022-40503 | Alta (7.5) | 0.41% | — | 13 abr 2023 | Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. |
| CVE-2022-33302 | Alta (7.8) | 0.12% | — | 13 abr 2023 | Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length. |
| CVE-2022-33296 | Alta (7.8) | 0.11% | — | 13 abr 2023 | Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message. |
| CVE-2022-33289 | Media (6.8) | 0.19% | — | 13 abr 2023 | Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card. |
| CVE-2022-33288 | Alta (8.8) | 0.12% | — | 13 abr 2023 | Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information. |
| CVE-2022-33269 | Alta (7.8) | 0.12% | — | 13 abr 2023 | Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. |
| CVE-2022-33231 | Alta (7.8) | 0.08% | — | 13 abr 2023 | Memory corruption due to double free in core while initializing the encryption key. |
| CVE-2021-30327 | Media (6.8) | 0.20% | — | 14 jun 2022 | Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon… |