MF
Product
Msm8208 Firmware
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 34Medium 8Low 0
Watch
Add Msm8208 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33213 | 8.8 | Mar 10 | Memory corruption in modem due to buffer overflow while processing a PPP packet Affected: All versions, or not specified |
| CVE-2022-22088 | 8.8 | Jan 9 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote Affected: All versions, or not specified |
| CVE-2020-11177 | 8.8 | Feb 22 | User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2023-28537 | 7.8 | Aug 8 | Memory corruption while allocating memory in COmxApeDec module in Audio Affected: All versions, or not specified |
| CVE-2023-22666 | 7.8 | Aug 8 | Memory Corruption in Audio while playing amrwbplus clips with modified content Affected: All versions, or not specified |
| CVE-2022-25705 | 7.8 | Mar 10 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response Affected: All versions, or not specified |
| CVE-2022-25694 | 7.8 | Mar 10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM Affected: All versions, or not specified |
| CVE-2022-33248 | 7.8 | Feb 12 | Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http Affected: All versions, or not specified |
| CVE-2022-33233 | 7.8 | Feb 12 | Memory corruption due to configuration weakness in modem wile sending command to write protected files Affected: All versions, or not specified |
| CVE-2022-33266 | 7.8 | Jan 9 | Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content Affected: All versions, or not specified |
| CVE-2022-25695 | 7.8 | Dec 13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25682 | 7.8 | Dec 13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2022-25743 | 7.8 | Nov 15 | Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-25724 | 7.8 | Nov 15 | Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-35072 | 7.8 | Jun 14 | Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-30255 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30254 | 7.8 | Nov 12 | Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1973 | 7.8 | Nov 12 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-1959 | 7.8 | Oct 20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30261 | 7.8 | Sep 17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11292 | 7.8 | Jun 9 | Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2020-11289 | 7.8 | May 7 | Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11234 | 7.8 | Apr 7 | When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in… Affected: All versions, or not specified |
| CVE-2020-11204 | 7.8 | Feb 22 | Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in… Affected: All versions, or not specified |
| CVE-2020-11195 | 7.8 | Feb 22 | Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
| CVE-2023-21625 | 7.5 | Aug 8 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response Affected: All versions, or not specified |
| CVE-2022-25702 | 7.5 | Dec 13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25685 | 7.5 | Dec 13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2021-1914 | 7.5 | Sep 8 | Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11255 | 7.5 | Apr 7 | Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-11226 | 7.5 | Mar 17 | Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2023-21626 | 7.1 | Aug 8 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key Affected: All versions, or not specified |
| CVE-2020-11304 | 7.1 | Jun 9 | Possible out of bound read in DRM due to improper buffer length check Affected: All versions, or not specified |
| CVE-2020-11132 | 7.1 | Nov 12 | u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
Showing 34
