Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 189

CVE-2022-33266

Integer overflow to buffer overflow in Audio

Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8009w and 241 more
CVE-2022-25715

Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Mdm9150 and 61 more
CVE-2022-22088

Integer Overflow to Buffer Overflow in Bluetooth HOST

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8009w and 297 more
CVE-2022-33255

Buffer over-read in Bluetooth HOST

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Ar8031 and 181 more
CVE-2023-28575

Multiple Type Confusion Vulnerability

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
205 205 Firmware 215 and 117 more
CVE-2023-21626

Improper Authentication in HLOS.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8017 and 368 more
CVE-2023-21625

Buffer Over-read in Network Services

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8017 and 89 more
CVE-2022-40537

Improper Validation of Array Index in Bluetooth HOST

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8009w and 321 more
CVE-2022-40510

Buffer copy without checking size of input in Audio.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8009w and 405 more
CVE-2022-33248

Integer overflow to buffer overflow in User Identity Module

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8009w and 321 more