MF
Product
Msm8208 Firmware
by Qualcomm · last CVE Aug 8, 2023
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 34Medium 8Low 0
Watch

Add Msm8208 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-33213
8.8
0%
Mar 10
Memory corruption in modem due to buffer overflow while processing a PPP packet
Affected: All versions, or not specified
CVE-2022-22088
8.8
1%
Jan 9
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
Affected: All versions, or not specified
CVE-2020-11177
8.8
0%
Feb 22
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2023-28537
7.8
0%
Aug 8
Memory corruption while allocating memory in COmxApeDec module in Audio
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Memory Corruption in Audio while playing amrwbplus clips with modified content
Affected: All versions, or not specified
CVE-2022-25705
7.8
0%
Mar 10
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Affected: All versions, or not specified
CVE-2022-25694
7.8
0%
Mar 10
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 12
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http
Affected: All versions, or not specified
CVE-2022-33233
7.8
0%
Feb 12
Memory corruption due to configuration weakness in modem wile sending command to write protected files
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 9
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content
Affected: All versions, or not specified
CVE-2022-25695
7.8
0%
Dec 13
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25682
7.8
0%
Dec 13
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2022-25743
7.8
0%
Nov 15
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-25724
7.8
0%
Nov 15
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-35072
7.8
0%
Jun 14
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2021-30255
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30254
7.8
0%
Nov 12
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-1973
7.8
0%
Nov 12
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2021-1959
7.8
0%
Oct 20
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30261
7.8
0%
Sep 17
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11292
7.8
1%
Jun 9
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2020-11289
7.8
0%
May 7
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11234
7.8
0%
Apr 7
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in…
Affected: All versions, or not specified
CVE-2020-11204
7.8
0%
Feb 22
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in…
Affected: All versions, or not specified
CVE-2020-11195
7.8
0%
Feb 22
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2023-21625
7.5
0%
Aug 8
Information disclosure in Network Services due to buffer over-read while the device receives DNS response
Affected: All versions, or not specified
CVE-2022-25702
7.5
0%
Dec 13
Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25685
7.5
0%
Dec 13
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
Affected: All versions, or not specified
CVE-2021-1914
7.5
1%
Sep 8
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2020-11255
7.5
1%
Apr 7
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto,…
Affected: All versions, or not specified
CVE-2020-11226
7.5
1%
Mar 17
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2023-21626
7.1
0%
Aug 8
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key
Affected: All versions, or not specified
CVE-2020-11304
7.1
0%
Jun 9
Possible out of bound read in DRM due to improper buffer length check
Affected: All versions, or not specified
CVE-2020-11132
7.1
0%
Nov 12
u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
Showing 34