QF
Product
Qcs8155 Firmware
33
CVEs
0
On KEV
7.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 27Medium 6Low 0
Watch
Add Qcs8155 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-53011 | 7.9 | Mar 3 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine Affected: All versions, or not specified |
| CVE-2024-33044 | 7.8 | Dec 2 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode Affected: All versions, or not specified |
| CVE-2023-33077 | 7.8 | Feb 6 | Memory corruption in HLOS while converting from authorization token to HIDL vector Affected: All versions, or not specified |
| CVE-2023-22383 | 7.8 | Dec 5 | Memory Corruption in camera while installing a fd for a particular DMA buffer Affected: All versions, or not specified |
| CVE-2023-24853 | 7.8 | Oct 3 | Memory Corruption in HLOS while registering for key provisioning notify Affected: All versions, or not specified |
| CVE-2023-28538 | 7.8 | Sep 5 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region Affected: All versions, or not specified |
| CVE-2023-21664 | 7.8 | Sep 5 | Memory Corruption in Core Platform while printing the response buffer in log Affected: All versions, or not specified |
| CVE-2023-21662 | 7.8 | Sep 5 | Memory corruption in Core Platform while printing the response buffer in log Affected: All versions, or not specified |
| CVE-2023-28575 | 7.8 | Aug 8 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link) Affected: All versions, or not specified |
| CVE-2023-21627 | 7.8 | Aug 8 | Memory corruption in Trusted Execution Environment while calling service API with invalid address Affected: All versions, or not specified |
| CVE-2023-21670 | 7.8 | Jun 6 | Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode Affected: All versions, or not specified |
| CVE-2022-40529 | 7.8 | Jun 6 | Memory corruption due to improper access control in kernel while processing a mapping request from root process Affected: All versions, or not specified |
| CVE-2022-33263 | 7.8 | Jun 6 | Memory corruption due to use after free in Core when multiple DCI clients register and deregister Affected: All versions, or not specified |
| CVE-2022-33224 | 7.8 | Jun 6 | Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries Affected: All versions, or not specified |
| CVE-2023-21666 | 7.8 | May 2 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool Affected: All versions, or not specified |
| CVE-2022-33260 | 7.8 | Mar 10 | Memory corruption due to stack based buffer overflow in core while sending command from USB of large size Affected: All versions, or not specified |
| CVE-2022-33242 | 7.8 | Mar 10 | Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD Affected: All versions, or not specified |
| CVE-2022-40520 | 7.8 | Jan 9 | Memory corruption due to stack-based buffer overflow in Core Affected: All versions, or not specified |
| CVE-2022-25721 | 7.8 | Jan 9 | Memory corruption in video driver due to type confusion error during video playback Affected: All versions, or not specified |
| CVE-2022-25717 | 7.8 | Jan 9 | Memory corruption in display due to double free while allocating frame buffer memory Affected: All versions, or not specified |
| CVE-2022-25715 | 7.8 | Jan 9 | Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields Affected: All versions, or not specified |
| CVE-2022-25711 | 7.8 | Dec 13 | Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-30334 | 7.8 | Jun 14 | Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35105 | 7.8 | Apr 1 | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30318 | 7.8 | Feb 11 | Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2021-30269 | 7.8 | Jan 3 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2021-1894 | 7.8 | Jan 3 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2023-33070 | 5.5 | Dec 5 | Transient DOS in Automotive OS due to improper authentication to the secure IO calls Affected: All versions, or not specified |
| CVE-2023-21624 | 5.5 | Jul 4 | Information disclosure in DSP Services while loading dynamic module Affected: All versions, or not specified |
| CVE-2022-40518 | 5.5 | Jan 9 | Information disclosure due to buffer overread in Core Affected: All versions, or not specified |
| CVE-2022-25664 | 5.5 | Oct 12 | Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… Affected: All versions, or not specified |
| CVE-2022-22078 | 4.6 | Oct 12 | Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute,… Affected: All versions, or not specified |
Showing 33
