QF
Product
Qcs605 Firmware
by Qualcomm · last CVE Nov 22, 2024
540
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 161High 310Medium 29Low 0
Watch

Add Qcs605 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10610
9.1
1%
Apr 16
Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10551
9.1
1%
Apr 16
String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2019-10577
9.1
1%
Mar 5
Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-10554
9.1
1%
Mar 5
Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in…
Affected: All versions, or not specified
CVE-2019-10553
9.1
1%
Mar 5
Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2019-10552
9.1
1%
Mar 5
Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2019-10550
9.1
1%
Mar 5
Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-14057
9.1
1%
Feb 7
Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2019-10579
9.1
1%
Jan 21
Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2018-13906
9.1
1%
Jun 14
The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2018-11932
9.1
1%
Feb 25
Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2022-33280
8.8
0%
Feb 12
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet
Affected: All versions, or not specified
CVE-2021-30285
8.8
0%
Jan 13
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2019-2316
8.8
0%
Jul 25
When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640,…
Affected: All versions, or not specified
CVE-2021-1949
8.4
0%
Oct 20
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2019-10510
8.2
1%
Sep 30
BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-33268
8.1
0%
Dec 13
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP
Affected: All versions, or not specified
CVE-2019-10494
8.1
0%
Dec 12
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics…
Affected: All versions, or not specified
CVE-2019-10529
8.1
2%
Nov 6
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute,…
Affected: All versions, or not specified
CVE-2023-21664
7.8
0%
Sep 5
Memory Corruption in Core Platform while printing the response buffer in log
Affected: All versions, or not specified
CVE-2023-21662
7.8
0%
Sep 5
Memory corruption in Core Platform while printing the response buffer in log
Affected: All versions, or not specified
CVE-2023-22666
7.8
0%
Aug 8
Memory Corruption in Audio while playing amrwbplus clips with modified content
Affected: All versions, or not specified
CVE-2023-21651
7.8
0%
Aug 8
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE
Affected: All versions, or not specified
CVE-2022-33242
7.8
0%
Mar 10
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD
Affected: All versions, or not specified
CVE-2022-33248
7.8
0%
Feb 12
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http
Affected: All versions, or not specified
CVE-2022-33232
7.8
0%
Feb 12
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory
Affected: All versions, or not specified
CVE-2022-40520
7.8
1%
Jan 9
Memory corruption due to stack-based buffer overflow in Core
Affected: All versions, or not specified
CVE-2022-33266
7.8
0%
Jan 9
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content
Affected: All versions, or not specified
CVE-2022-25746
7.8
0%
Jan 9
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping
Affected: All versions, or not specified
CVE-2022-25681
7.8
0%
Dec 13
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon…
Affected: All versions, or not specified
CVE-2022-25660
7.8
0%
Oct 12
Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-25661
7.8
0%
Oct 12
Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2022-22058
7.8
0%
Sep 26
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
Affected: All versions, or not specified
CVE-2022-22074
7.8
0%
Sep 16
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…
Affected: All versions, or not specified
CVE-2022-22070
7.8
0%
Sep 2
Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22085
7.8
0%
Jun 14
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22084
7.8
0%
Jun 14
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2022-22082
7.8
0%
Jun 14
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2022-22072
7.8
0%
Jun 14
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity,…
Affected: All versions, or not specified
CVE-2021-35112
7.8
0%
Jun 14
A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30350
7.8
0%
Jun 14
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30334
7.8
0%
Jun 14
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-35105
7.8
0%
Apr 1
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30322
7.8
0%
Feb 11
Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30318
7.8
0%
Feb 11
Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
Affected: All versions, or not specified
CVE-2021-30317
7.8
1%
Feb 11
Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
Affected: All versions, or not specified
CVE-2021-30309
7.8
0%
Feb 11
Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected: All versions, or not specified
CVE-2021-30319
7.8
0%
Jan 13
Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30308
7.8
0%
Jan 13
Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
Affected: All versions, or not specified
CVE-2021-30289
7.8
0%
Jan 3
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
Affected: All versions, or not specified
Page 4 of 10 · 500 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)