AF
Product
Apq8009w Firmware
On CISA KEVExploited in the wild
133
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 45High 75Medium 13Low 0
Watch
Add Apq8009w Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1906 In wildKEV | 5.5 | May 7 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability Affected: All versions, or not specified |
| CVE-2021-1963 | 6.7 | Sep 9 | Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30342 | 5.9 | Jun 14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2022-22075 | 5.5 | Mar 10 | Information Disclosure in Graphics during GPU context switch Affected: All versions, or not specified |
| CVE-2021-1924 | 5.5 | Nov 12 | Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1939 | 5.5 | Sep 17 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-1904 | 5.5 | Sep 8 | Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11221 | 5.5 | Mar 17 | Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to… Affected: All versions, or not specified |
| CVE-2020-11199 | 5.5 | Mar 17 | HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11123 | 5.5 | Nov 12 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed… Affected: All versions, or not specified |
| CVE-2022-22079 | 4.6 | Jan 9 | Denial of service while processing fastboot flash command on mmc due to buffer over read Affected: All versions, or not specified |
| CVE-2021-1899 | 4.6 | Jul 13 | Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Affected: All versions, or not specified |
| CVE-2021-1897 | 4.6 | Jul 13 | Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,… Affected: All versions, or not specified |
Showing 13
