QF
Product
Qsm8350 Firmware
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 60Medium 8Low 0
Watch
Add Qsm8350 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11206 | 7.8 | Nov 12 | Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… Affected: All versions, or not specified |
| CVE-2020-11205 | 7.8 | Nov 12 | u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in… Affected: All versions, or not specified |
| CVE-2020-11130 | 7.8 | Nov 12 | u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT,… Affected: All versions, or not specified |
| CVE-2020-11121 | 7.8 | Nov 12 | u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial… Affected: All versions, or not specified |
| CVE-2025-21448 | 7.5 | Apr 7 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-23364 | 7.5 | Sep 2 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2021-1982 | 7.5 | Nov 12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-43065 | 7.1 | Apr 7 | Exposed Dangerous Method or Function in HLOS Affected: All versions, or not specified |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: All versions, or not specified |
| CVE-2023-21652 | 7.1 | Aug 8 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use Affected: All versions, or not specified |
| CVE-2022-25665 | 7.1 | Oct 12 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2021-1930 | 7.1 | Sep 8 | Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… Affected: All versions, or not specified |
| CVE-2022-33257 | 7.0 | Mar 10 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone Affected: All versions, or not specified |
| CVE-2022-22094 | 7.0 | Sep 16 | memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Affected: All versions, or not specified |
| CVE-2022-22093 | 7.0 | Sep 16 | Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon… Affected: All versions, or not specified |
| CVE-2021-1921 | 7.0 | Nov 12 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2021-35097 | 6.8 | Sep 2 | Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2024-43056 | 6.5 | Mar 3 | Transient DOS during hypervisor virtual I/O operation in a virtual machine Affected: All versions, or not specified |
| CVE-2021-1960 | 6.5 | Sep 9 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon… Affected: All versions, or not specified |
| CVE-2023-33037 | 5.5 | Jan 2 | Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data Affected: All versions, or not specified |
| CVE-2023-33036 | 5.5 | Jan 2 | Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call Affected: All versions, or not specified |
| CVE-2022-40533 | 5.5 | Jun 6 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request Affected: All versions, or not specified |
| CVE-2022-33273 | 5.5 | May 2 | Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation Affected: All versions, or not specified |
| CVE-2020-11123 | 5.5 | Nov 12 | u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed… Affected: All versions, or not specified |
