QF
Product
Qcs610 Firmware
On CISA KEVExploited in the wild
328
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 36High 226Medium 66Low 0
Watch
Add Qcs610 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33111 | 5.5 | Apr 1 | Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command Affected: All versions, or not specified |
| CVE-2023-33064 | 5.5 | Feb 6 | Transient DOS in Audio when invoking callback function of ASM driver Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Transient DOS in Automotive OS due to improper authentication to the secure IO calls Affected: All versions, or not specified |
| CVE-2023-28566 | 5.5 | Nov 7 | Information disclosure in WLAN HAL while handling the WMI state info command Affected: All versions, or not specified |
| CVE-2023-28571 | 5.5 | Oct 3 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan Affected: All versions, or not specified |
| CVE-2022-40523 | 5.5 | Jun 6 | Information disclosure in Kernel due to indirect branch misprediction Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25676 | 5.5 | Nov 15 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2022-25664 | 5.5 | Oct 12 | Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-25653 | 5.5 | Sep 16 | Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2021-35135 | 5.5 | Sep 2 | A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35119 | 5.5 | Jun 14 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Affected: All versions, or not specified |
| CVE-2021-30331 | 5.5 | Apr 1 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30314 | 5.5 | Jan 13 | Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30278 | 5.5 | Jan 3 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1969 | 5.5 | Oct 20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1968 | 5.5 | Oct 20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2021-1929 | 5.5 | Sep 8 | Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-11123 | 5.5 | Nov 12 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed… Affected: All versions, or not specified |
| CVE-2020-3679 | 5.5 | Sep 9 | u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto,… Affected: All versions, or not specified |
| CVE-2020-3644 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3643 | 5.5 | Sep 8 | u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2020-3621 | 5.5 | Sep 8 | u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential… Affected: All versions, or not specified |
| CVE-2020-3620 | 5.5 | Sep 8 | u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information… Affected: All versions, or not specified |
| CVE-2019-14115 | 5.5 | Sep 8 | u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading the secure input while… Affected: All versions, or not specified |
| CVE-2019-14025 | 5.5 | Sep 8 | u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to… Affected: All versions, or not specified |
| CVE-2024-38426 | 5.3 | Mar 3 | Improper Authentication in Modem Affected: All versions, or not specified |
| CVE-2021-1967 | 5.3 | Oct 20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon… Affected: All versions, or not specified |
