Filtered by vendor Qualcomm Subscriptions
Filtered by product Sa8540p Subscriptions
Total 183 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-24853 1 Qualcomm 226 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 223 more 2025-02-27 8.4 High
Memory Corruption in HLOS while registering for key provisioning notify.
CVE-2023-33039 1 Qualcomm 42 Qam8295p, Qam8295p Firmware, Qam8650p and 39 more 2025-02-27 8.4 High
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
CVE-2022-33282 1 Qualcomm 40 Msm8996au, Msm8996au Firmware, Qam8295p and 37 more 2025-02-11 8.4 High
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
CVE-2024-49838 1 Qualcomm 338 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 335 more 2025-02-05 8.2 High
Information disclosure while parsing the OCI IE with invalid length.
CVE-2024-38414 1 Qualcomm 58 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 55 more 2025-02-05 6.1 Medium
Information disclosure while processing information on firmware image during core initialization.
CVE-2024-38416 1 Qualcomm 144 Ar8035, Ar8035 Firmware, C-v2x 9150 and 141 more 2025-02-05 6.1 Medium
Information disclosure during audio playback.
CVE-2024-38417 1 Qualcomm 112 Ar8035, Ar8035 Firmware, C-v2x 9150 and 109 more 2025-02-05 6.1 Medium
Information disclosure while processing IO control commands.
CVE-2024-38418 1 Qualcomm 124 C-v2x 9150, C-v2x 9150 Firmware, Csrb31024 and 121 more 2025-02-05 7.8 High
Memory corruption while parsing the memory map info in IOCTL calls.
CVE-2024-38420 1 Qualcomm 320 Aqt1000, Aqt1000 Firmware, Ar8035 and 317 more 2025-02-05 8.8 High
Memory corruption while configuring a Hypervisor based input virtual device.
CVE-2023-43538 1 Qualcomm 274 Aqt1000, Aqt1000 Firmware, Ar8035 and 271 more 2025-01-27 9.3 Critical
Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.
CVE-2024-21474 1 Qualcomm 48 Ar8035, Ar8035 Firmware, Fastconnect 6900 and 45 more 2025-01-15 8.4 High
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
CVE-2024-23366 1 Qualcomm 34 Qam8255p, Qam8255p Firmware, Qam8295p and 31 more 2025-01-10 6.6 Medium
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
CVE-2024-43063 1 Qualcomm 34 Qam8255p, Qam8255p Firmware, Qam8295p and 31 more 2025-01-10 6.1 Medium
information disclosure while invoking the mailbox read API.
CVE-2022-40507 1 Qualcomm 484 315 5g Iot Modem, 315 5g Iot Modem Firmware, 9205 Lte Modem and 481 more 2025-01-07 8.4 High
Memory corruption due to double free in Core while mapping HLOS address to the list.
CVE-2024-33056 1 Qualcomm 662 205 Mobile Platform, 205 Mobile Platform Firmware, 315 5g Iot Modem and 659 more 2024-12-12 8.4 High
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
CVE-2024-33053 1 Qualcomm 114 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6200 and 111 more 2024-12-12 6.7 Medium
Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
CVE-2024-33044 1 Qualcomm 425 315 5g Iot Modem, 315 5g Iot Modem Firmware, Aqt1000 and 422 more 2024-12-12 8.4 High
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
CVE-2024-33037 1 Qualcomm 104 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6800 and 101 more 2024-12-11 6.1 Medium
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
CVE-2024-33036 1 Qualcomm 106 C-v2x 9150, C-v2x 9150 Firmware, Fastconnect 6800 and 103 more 2024-12-11 6.7 Medium
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
CVE-2024-33012 1 Qualcomm 501 Ar8035, Ar8035 Firmware, Ar9380 and 498 more 2024-11-26 7.5 High
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.