Qualcomm Sm6225 Firmware
92 CVEs affecting Qualcomm Sm6225 Firmware. Latest disclosed: 2024-11-22. Critical: 10, High: 71.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-30351 | Critical | 9.8 | 2022-01-03 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Comput… |
CVE-2021-1975 | Critical | 9.8 | 2021-11-12 | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2022-33231 | Critical | 9.3 | 2023-04-13 | Memory corruption due to double free in core while initializing the encryption key. |
CVE-2021-1942 | Critical | 9.3 | 2022-04-01 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2021-30317 | Critical | 9.3 | 2022-02-11 | Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2021-30285 | Critical | 9.3 | 2022-01-13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CVE-2021-30276 | Critical | 9.3 | 2022-01-03 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Con… |
CVE-2021-30275 | Critical | 9.3 | 2022-01-03 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2023-33054 | Critical | 9.1 | 2023-12-05 | Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. |
CVE-2021-1924 | Critical | 9.0 | 2021-11-12 | Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2023-33022 | High | 8.4 | 2023-12-05 | Memory corruption in HLOS while invoking IOCTL calls from user-space. |
CVE-2023-33074 | High | 8.4 | 2023-11-07 | Memory corruption in Audio when SSR event is triggered after music playback is stopped. |
CVE-2023-33029 | High | 8.4 | 2023-10-03 | Memory corruption in DSP Service during a remote call from HLOS to DSP. |
CVE-2022-33275 | High | 8.4 | 2023-09-05 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
CVE-2023-21628 | High | 8.4 | 2023-06-06 | Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. |
CVE-2022-40507 | High | 8.4 | 2023-06-06 | Memory corruption due to double free in Core while mapping HLOS address to the list. |
CVE-2023-21666 | High | 8.4 | 2023-05-02 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. |
CVE-2023-21665 | High | 8.4 | 2023-05-02 | Memory corruption in Graphics while importing a file. |
CVE-2022-40532 | High | 8.4 | 2023-04-13 | Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target. |
CVE-2021-35105 | High | 8.4 | 2022-04-01 | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |