Qualcomm Msm8608 vulnerabilities, page 5

132 vulnerabilities

Known vulnerabilities in Qualcomm Msm8608, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.2MediumCVE-2022-22075qualcomm, inc. · snapdragon +183 moreInformation Exposure in GraphicsInformation Disclosure in Graphics during GPU context switch.EPSS0.12%7.9HighCVE-2022-33264qualcomm, inc. · snapdragon +241 moreStack-based buffer overflow in ModemMemory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.EPSS0.11%7.8HighCVE-2022-33248qualcomm, inc. · snapdragon +162 moreInteger overflow to buffer overflow in User Identity ModuleMemory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.EPSS0.13%6.8MediumCVE-2022-33289qualcomm, inc. · snapdragon +226 moreImproper validation of array index in ModemMemory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.EPSS0.19%7.8HighCVE-2022-33302qualcomm, inc. · snapdragon +225 moreImproper validation of array index in User Identity ModuleMemory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.EPSS0.12%7.8HighCVE-2022-33233qualcomm, inc. · snapdragon +201 moreConfiguration weakness in modemMemory corruption due to configuration weakness in modem wile sending command to write protected files.EPSS0.12%7.8HighCVE-2022-33266qualcomm, inc. · snapdragon +122 moreInteger overflow to buffer overflow in AudioMemory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.EPSS0.12%9.3CriticalCVE-2022-33231qualcomm, inc. · snapdragon +219 moreDouble free in CoreMemory corruption due to double free in core while initializing the encryption key.EPSS0.08%8.2HighCVE-2022-33255qualcomm, inc. · snapdragon +92 moreBuffer over-read in Bluetooth HOSTInformation disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.EPSS0.43%8.8HighCVE-2022-33213qualcomm, inc. · snapdragon +209 moreMemory Corruption in MODEMMemory corruption in modem due to buffer overflow while processing a PPP packetEPSS0.41%8.4HighCVE-2024-21468qualcomm, inc. · snapdragon +225 moreUse After Free in KernelMemory corruption when there is failed unmap operation in GPU.EPSS0.11%7.8HighCVE-2024-43052qualcomm, inc. · snapdragon +89 moreImproper Input Validation in Video Analytics and ProcessingMemory corruption while processing API calls to NPU with invalid input.EPSS0.10%7.8HighCVE-2024-38422qualcomm, inc. · snapdragon +263 moreInteger Overflow to Buffer Overflow in AudioMemory corruption while processing voice packet with arbitrary data received from ADSP.EPSS0.10%7.8HighCVE-2024-38423qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in Graphics LinuxMemory corruption while processing GPU page table switch.EPSS0.10%8.2HighCVE-2024-45552qualcomm, inc. · snapdragon +145 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.EPSS0.27%5.5MediumCVE-2024-33043qualcomm, inc. · snapdragon +197 moreBuffer Over-read in FM HostTransient DOS while handling PS event when Program Service name length offset value is set to 255.EPSS0.09%7.8HighCVE-2024-33042qualcomm, inc. · snapdragon +196 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when Alternative Frequency offset value is set to 255.EPSS0.13%8.4HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%7.8HighCVE-2024-33052qualcomm, inc. · snapdragon +197 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when user provides data for FM HCI command control operations.EPSS0.13%7.5HighCVE-2024-23358qualcomm, inc. · snapdragon +53 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.EPSS0.26%